3 MyID AD FS Adapter OAuth

The AD FS Adapter OAuth provides Active Directory Federation Services (AD FS) with FIDO2 authentication mechanism, using a FIDO2 security key to allow identity access to a Relying Party Trust. You can configure the AD FS Adapter OAuth as a primary or additional authentication step using the AD FS Manager Tool.

You must deploy the AD FS Adapter OAuth to your AD FS servers. You can install the AD FS Adapter OAuth on a system running Windows Server 2016 or 2019; however, only Windows Server 2019 supports the use of additional authentication methods as primary authenticators.

This section contains the following information:

• An overview of the AD FS authentication process.

  See section 3.1, Overview.

• AD FS prerequisites.

  See section 3.2, AD FS Adapter OAuth prerequisites.

• Information on installing and configuring the ADFS Auth web service.

  See section 3.3, Setting up the ADFS Auth web service.

• Details on using the standalone authentication service for AD FS authentication.

  See section 3.4, Configuring the standalone authentication service for AD FS.

• Instructions for installing the AD FS Adapter OAuth plug-in on the AD FS server.

  See section 3.5, Installing the AD FS Adapter OAuth.

• Information on configuration options and themes for the AD FS Adapter OAuth.

  See section 3.6, Managing the AD FS Adapter OAuth.

• Troubleshooting issues with the AD FS Adapter OAuth.

  See section 3.7, Troubleshooting.