Microsoft's Active Directory Federation Services (ADFS)
Active Directory Federation Services Microsoft's Active Directory Federation Services (ADFS) is outdated because it only allows SAML 1.0 rather than the current 2.0 and requires multiple servers. ADFS is focused around Business Central clients. With ADFS you have to choose between Security Assertions Markup Language (SAML) 1.0 tokens or JSON Web Tokens (JWT). Then Business Central and Business Central Web Server has to be adjusted to use ADFS. The Dynamic Nav Windows client connection has been discontinued for a number of years now. Microsoft announced the availability of Azure Active Directory certificate-based authentication (CBA) in Feb. 2022. Source: https://redmondmag.com/articles/2021/04/28/fireeye-explains-nobelium-exploit-of-adfs.aspx ADFS was attacked by the Nobelium (also called "Solorigate") group associated with Russia, which tapped into government and industry organizations. One of the avenues of those attacks was ADFS...