Take the 2-minute tour ×
User Experience Stack Exchange is a question and answer site for user experience researchers and experts. It's 100% free, no registration required.

I'm creating a SSL certificate for an ADFS server. It will be used to sign-into various sites that support Single Sign On.

I'm at the point of the process where I need to choose a name for the host such as

 https://adfs.company.com

I don't think it's technically possible to have the SSO engine work like this, but can have a redirect accomplish it.

https://company.com/signin 

.

  • Is there a preferred hostname for federation servers such as ADFS?

Some hostnames I considered include login, signin, sso, auth, saml, nycsso12 (in decreasing order of friendliness)

share|improve this question
    
identity.company.com (my personal preference). –  André Daniel Sep 21 at 7:14

1 Answer 1

Active Directory Federation Service (ADFS) has nothing to do with the URL on your site. ADFS is a technique to build trust between two different Active Directory domains to share resources across different networks.

If you have a full trust duplicate direction trust between Company A and Company B, these companies use their previous sign-in pages. When signed in, they can access the AD trusted company's on the same URL/IP.

Using http://adfs.company-a.com as sign in address, could be done, but makes no sense for the user. ADFS is a technical term and should be avoided. Instead use redirections if users try to access resources when they're not signed in. Upon successful login, redirect back to the requested page for the best possible user experience.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.