Tag Info

New answers tagged


The only reasons to create a separate AD domain is to have a different password policy, to segment replication. You can minimize risk of a compromised DC only by having a new forest. Any domain in a forest can result in compromised Enterprise Admin credentials. The ADFS server must be trusted by both domains, so a Domain trust or a forest trust is needed. ...


It depends alot on the software and SSO protocol. There are a wide variety of "keys" and "secrets" in play when dealing with SSO. For the sake of contrasting different keys, consider your example of a smartcard. Usually this is used for authenticating the user. A system would generally know about the user's public key already, and issues a challenge to ...

Top 50 recent answers are included