Active Directory Federation Services (AD FS) has long been considered the best way to authenticate to the Microsoft Cloud in Hybrid Identity scenarios.
However, AD FS does not adhere to Zero Trust principles, and it's a pain to maintain and secure. If you don't need the functionality that AD FS offers, you can go all-in on Zero Trust by leaving AD FS behind.
Sander Berkouwer shows you what to look for, how to make the right decisions and how to tell your boss. Then, he shows you how to migrate off AD FS and how to properly decomission your AD FS deployment to make sure nothing is left behind that reminds you of your organization's AD FS past.
Sander Berkouwer calls himself an Active Directory aficionado and has done everything with Active Directory and Entra ID… including decommissioning.
Sander is an MCSE and MCITP, has been an MCT for the past 10 years, a Microsoft Most Valuable Professional (MVP) for the last 16 years. He is also an 8 time Veeam Vanguard and triple VMware vExpert.
