Integration > Active Directory Federation Services
Active Directory Federation Services
Microsoft’s federation service issuing signed tokens for SSO. CBOM Secure discovers token-signing, token-decrypting, and service-communications certificates through native PowerShell as an optional phase within the AD scan.
Use Cases
Inventory AD FS token-signing, token-decrypting, and service-communications certificates across federation deployments.
Token-Signing Coverage
Inventories token-signing certificates underpinning enterprise SSO and federation.
Token-Decrypting Keys
Captures token-decrypting certificate material for encrypted token claims.
PowerShell-Based
Uses native PowerShell Get-AdfsCertificate for accurate AD FS certificate enumeration.
Integrations and Resources
CBOM Secure
Active Directory Federation Services
Microsoft federation service issuing signed SAML/OIDC tokens for single sign-on.