Designing ADFS 4.0 identity and attribute stores

In the previous chapters, we discussed different solution patterns with ADFS, including the relying party trusts and the claims rule language. On top of these features, we will focus on several capabilities that will soon be available with the new Windows Server 2016. Many of these scenarios were already available in Windows Server 2012 R2, so you only need to upgrade if you want to use these extended solutions. The section is separated into two main areas:

• Using a custom attributes store to populate claims

• Using a new identity store as claims provider

First, we will start with the custom attribute stores.

Using custom attributes store to populate claims

Basically, attribute stores are data sources that can be used to populate claims. For business reasons, you can provide additional information in claims that are not stored in Active Directory. With ADFS, you can use the following additional attribute stores, which are shown in the following figure...