Active Directory Federation Services (AD FS) has long been considered the best way to authenticate to the Microsoft Cloud in Hybrid Identity scenarios. However, AD FS does not adhere to Zero Trust principles, and it's a pain to maintain and secure. If you don't need the functionality that AD FS offers, you can go all-in on Zero Trust by leaving AD FS behind. Sander Berkouwer shows you what to look for, how to make the right decisions and how to tell your boss. Then, he shows you how to migrate off AD FS and how to properly decomission your AD FS deployment to make sure nothing is left behind that reminds you of your organization's AD FS past.