Add a New Windows NT Token-Based Application to the Federation Service

Applies To: Windows Server 2008

When you configure your Active Directory Federation Services (AD FS)–enabled Web server to host a Windows NT token–based application, you must add a reference to that application in the trust policy so that you can specify application properties for the Federation Service. You can use the following procedure to add a new Windows NT token–based application to the Federation Service. You perform this procedure on a federation server in the resource partner.

Membership in Administrators, or equivalent, on the local computer is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).

To add a Windows NT token–based application to the Federation Service

1. Click Start, point to Administrative Tools, and then click Active Directory Federation Services.

2. Double-click Federation Service, double-click Trust Policy, double-click My Organization, right-click Applications, point to New, and then click Application.

3. On the Welcome to the Add Application Wizard page, click Next.

4. On the Application Type page, click Windows NT token–based application, and then click Next.

5. On the Application Details page, in Application display name, type the name of the application.

6. In Application URL, type the URL for your application (for example, https://www.treyresearch.net/ApplicationName/) and then click Next.

7. On the Accepted Identity Claim page, click one of the following identity claim types, based on the needs of your application, and then click Next:

   • User principal name (UPN)

   • E-mail

8. On the Enable this Application page, ensure that the Enable this application check box is selected, and then click Next.

9. On the Completing the Add Application Wizard page, click Finish.