ADFS (2008–2023)
From 2008, CERN’s web SSO was Active Directory Federation Services, with Active Directory resolving identities behind it. It worked — until the customisations layered on it made transparent upgrades impossible and the MALT licensing shock removed any reason to keep paying for the trap. Replaced by cern-sso.
Topology
- Part of: identity-architecture
- Cites: iam-journey-chep2020 — the 2008 origin and why it was abandoned.