Nowadays more and more work, communication and collaboration involves multiple external parties. This can involve by example employees, customers, partners, suppliers, cloud providers/platforms/applications.
This means it is becoming increasingly important to have proper authentication and authorization methods in place for single sign on (SSO) so users can be more productive. Besides the ease-of-use It can also lead to better security.
Microsoft’s Active Directory Federation Services (ADFS) will make this possible. For more information on ADFS, here are some resources. Keep in mind though that while some information may be outdated, it will give you a broad idea of the concept and the inner workings. The current version of ADFS in Windows Server 2012 is 2.1 , while Windows Server 2008 uses 2.0
PS: Microsoft is moving more and more towards claims based authentication. Examples include Windows Server 2012 Dynamic Access Control and also SharePoint 2013 that has switched to claims based authentication by default now.
If you have some other resources that might be useful, please let me know so I can add them as well.
Like this:
Like Loading...
Tags: Access control, Active Directory, Active Directory Federation Services, ADFS, ADFS 2.0, ADFS 2.1, authentication, authorization, Azure, Cloud, configure, configuring, Deploy, deploying, Dynamic Access Control, federated identity, ForeFront UAG, IAAS, ICT, jump start, Microsoft, Microsoft Intune, Office 365, PKI, plan, security, Sharepoint, Sharepoint online, singe-sign-on, Single Sign On, SSO, Technet, Threat Management Gateway, TMG, UAG, Universal Access Gateway, virtual lab, Windows Azure, Windows Server 2008, Windows Server 2012
Tags: 070-410, 070-411, 070-412, 070-413, 070-414, 070-417, 70-410, 70-411, 70-412, 70-413, 70-414, 70-417, blog, blog post, Born To Learn, certification, Exam, forum, learn, Learning, Microsoft, microsoft learning, Microsoft Virtual Academy, MVA, preparation, preparation resources, resources, Server 2012 Virtual Labs, Tweakers, Tweakers.net, Virtual Academy, virtual lab, virtual labs, wiki, Windows, Windows Server, Windows Server 2012
Since I’m currently working with System Center Operations Manager 2012 (also often referred to as SCOM 2012 or OpsMgr 2012), I needed a testing environment.
Because time is precious, I want to minimize the time and effort needed to set it up. This is what I did:
- Install and configure Hyper-V on my Windows 8 laptop.
- Deploy a VM with Server 2012 Datacenter edition.
Configure a static IP address.
Configure AD DS / domain controller role.
Configure DHCP server role.
Configure DNS server role (if desirable, include DNS forwarder for internet DNS queries).
- Download and extract the pre-configured SCOM 2012 SP1 beta VHD (running Server 2012 Datacenter edition). System Center 2012 SP1 adds Windows Server 2012 SQL Server 2012 Support.
- Create a new VM for SCOM and configure it to use the downloaded pre-configured VHD.
Configure it with sufficient virtual CPUs and memory for the DB and the SCOM components.
- Start the SCOM VM, and follow the onscreen instructions. NOTE: First time configuration took about 1-2 hours, but this might be related to my hardware. Still it might be smart to plan the installation.
- Convert the Server 2012 Datacenter edition from ServerDatacenterEval to ServerDatacenter by running an elevated CMD as administrator and issuing the following command:
DISM /online /Set-Edition:ServerDatacenter> ProductKey:<productkey> /AcceptEula
Reboot.
- Replace the SCOM 2012 evaluation license with your own license using Operations Manager Shell:
Set-SCOMLicense -ProductId “yourlicensekey“
Reboot
Check the license using the Operations Manager Shell:
Get-SCOMManagementGroup | ft skuforlicense, version, timeofexpiration –a
- Shut down your SCOM 2012 VM.
- Shut down your AD DS / domain controller VM.
- Create a snapshot and/or export of both VM’s so you can more easily revert to a good starting point.
Also be sure to read Stefan Stranger’s blog post that goes into more detail with regards to the domain controller and automating the task for setting it up. It also includes screenshots to give you a better idea of the process.
PS: I love how Microsoft provides these pre-configured VHD’s. This has been great in the past, but now with client Hyper-V 3.0 in Windows 8 it saves me even more time because I don’t have to boot to Windows Server 2008 or Windows Server 2012 for Hyper-V.
Like this:
Like Loading...
Tags: Beta, blog, Hyper-V, Hyper-V 3.0, ICT, lab, Microsoft, Microsoft System Center Operations Manager 2012, operations management, operations manager, Operations Manager 2012, OpsMgr, OpsMgr 2012, OpsMgr2012, SCOM, SCOM 2012, SCOM 2012 SP1, SCOM 2012 SP1 Beta, SCOM2012, Server 2012, service pack 1, SP1, System Center, System Center Operations Manager, System Center Operations Manager 2012, test, testing environment, virtual lab