ADFS
Using
Instead of a farewell — an upgrade. We deployed a current version of ADFS: until now we'd only had the very first one, stood up back in 2015. The difference is dramatic: modern standards out of the box now, including OAuth 2.0 and OIDC, not just WS-Federation. Corporate SSO stays on ADFS.
Using
Moving on to the full-scale rollout. The rollout goes off without a hitch.
Assessing
In an isolated environment, I'm rehearsing the migration of all our platforms and web applications to SSO authentication via ADFS over the SAML protocol.
It takes a lot of experiments and research, since there was almost no coherent documentation or examples for this product anywhere online. Pretty much everything had to be invented and felt out on my own.