Which service enables single sign-on authentication in Active Directory?

Which service enables single sign-on authentication in Active Directory?

• A. Active Directory Federation Services (AD FS)
• B. Active Directory Certificate Services (AD CS)
• C. Active Directory Lightweight Directory Services (AD LDS)
• D. Active Directory Rights Management

Answer: (A)

Single sign-on across applications is achieved when a trusted identity provider issues tokens that prove a user has already authenticated. Active Directory Federation Services is the piece that acts as that federation service, authenticating the user and issuing security tokens (claims) that can be presented to multiple applications or services. Once a user signs in, those tokens let them access various resources without re-entering credentials, across on-premises and cloud apps that trust the federation. The other services do different things: Certificate Services handles digital certificates for encryption and identity; Lightweight Directory Services provides directory services without the full AD DS domain functionality; Rights Management focuses on protecting and controlling access to information rather than authenticating users for multiple apps.

Single sign-on across applications is achieved when a trusted identity provider issues tokens that prove a user has already authenticated. Active Directory Federation Services is the piece that acts as that federation service, authenticating the user and issuing security tokens (claims) that can be presented to multiple applications or services. Once a user signs in, those tokens let them access various resources without re-entering credentials, across on-premises and cloud apps that trust the federation.

The other services do different things: Certificate Services handles digital certificates for encryption and identity; Lightweight Directory Services provides directory services without the full AD DS domain functionality; Rights Management focuses on protecting and controlling access to information rather than authenticating users for multiple apps.