问题
How to configure ADFS to different ADAM store rather than the domain/AD the ADFS is installed on?
For example: ADFS 2.0 is installed on xyz.com domain & users authentication happen with some ADAM store (all we have is the connection string)...
回答1:
ADAM is essentially an LDAP - look here
Note that you can only use ADAM for authorisation not authentication.
回答2:
At last we created the custom STS that ADFS will trust for our solution.
So now:
RP will be added in ADFS.
ADFS trust token from custom STS.
HomeRealmDiscovery modified to show custom STS login page.
Custom STS creates the token & pass to ADFS & ADFS is set to pass claims & token to RP.
& it all worked.
We had many issues with setting up the right certificated (in our test we used Selfssl7) & everything is on same machine with ADFS, CustomSTS & RP working on different ports (ADFS on default 443).
来源：https://stackoverflow.com/questions/9012083/adfs-2-0-configured-to-authenticate-users-from-adam