Active Directory Federation Services provides access control and single sign on (SSO) across a wide variety of applications including Amazon WorkMail, Amazon WorkSpaces, Amazon WorkDocs, Office 365, cloud based SaaS applications, and applications on the corporate network.
For the user, it provides seamless sign on using the same, familiar account credentials.
For the developer, it provides an easy way to authenticate users whose identities live in the organizational directory so that you can focus your efforts on your application, not authentication or identity.
Eliminate Passwords from the Extranet
Sign in with AWS Multi-Factor Authentication
Password-less Access from Compliant Devices
Sign in with Windows Hello for Business
Secure Access to Applications
Modern Authentication
Configure access control policies without having to know claim rules language
Enable sign on with non-AD LDAP directories
Better Sign-in experience
Customize sign in experience for AD FS applications
Manageability and Operational Enhancements
Streamlined auditing for easier administrative management
Improved interoperability with SAML 2.0 for participation in confederations
Simplified password management for federated users
Highlights
Provide single sign on (SSO) across a wide variety of applications including Amazon WorkMail, Amazon WorkSpaces, Amazon WorkDocs, Office 365, cloud based SaaS applications and applications on the corporate network.
Provide AWS Multi-Factor Authentication to your users when signing into federated applications
Provide sign on and access control to both modern and legacy applications, on premises and in the cloud, based on the same set of credentials and policies.
AWS Marketplace now accepts line of credit payments through the PNC Vendor Finance program. This program is available to select AWS customers in the US, excluding NV, NC, ND, TN, & VT.
Pricing is based on actual usage, with charges varying according to how much you consume. Subscriptions have no end date and may be canceled any time.
Additional AWS infrastructure costs may apply. Use the AWS Pricing Calculator to estimate your infrastructure costs.
If you are an AWS Free Tier customer with a free plan, you are eligible to subscribe to this offer. You can use free credits to cover the cost of eligible AWS infrastructure. See AWS Free Tier for more details. If you created an AWS account before July 15th, 2025, and qualify for the Legacy AWS Free Tier, Amazon EC2 charges for Micro instances are free for up to 750 hours per month. See Legacy AWS Free Tier for more details.
You pay by the hour for this ADFS Server on Windows Server 2022. Pricing is not tiered by feature. Instead, each dimension maps to a specific AWS EC2 instance type, so your rate depends on the hardware you choose. Options span small burstable instances like t2.nano and t3.micro up to large compute, memory, storage, and GPU instances such as c5n.18xlarge, x1e.32xlarge, and p3dn.24xlarge. Larger instances carry more CPU, memory, and network capacity, so their hourly rate is higher. Pick the instance size that fits your workload and hourly billing follows that choice.
Top-of-mind questions for buyers
What does one hourly unit include besides the AWS instance?
Each hourly rate covers the ADFS Server software preconfigured on Windows Server 2022, running on the AWS EC2 instance type named in that dimension. You choose the instance size, and the hourly charge reflects the compute, memory, and network capacity of that hardware. The image deploys a Microsoft ADFS 2022 federation server ready for setup.
Am I charged when the ADFS instance is stopped or powered off?
Hourly software charges apply only while the instance runs. A fully stopped instance stops accruing the hourly software fee. Underlying AWS storage costs for the attached volume may still apply while the instance is stopped, but the software licence meters running time only.
If I need a bigger instance later, does my hourly rate change automatically?
No automatic change occurs. You select the EC2 instance type at deployment. To move to a different size, you stop the instance and change its type, then restart. Your hourly rate then matches the new instance dimension. Each dimension bills independently at its own rate.
cloudinfrastructureservices.co.uk
Helpful?
Vendor refund policy
We do not currently support refunds, but you can cancel at any time.
How can we make this page better?
Tell us how we can improve this page, or report an issue with this product.
Give us feedbackReport a problem with this product or seller
Legal
Vendor terms and conditions
Upon subscribing to this product, you must acknowledge and agree to the terms and conditions outlined in the vendor's End User License Agreement (EULA).
Content disclaimer
Vendors are responsible for their product descriptions and other product content. AWS does not warrant that vendors' product descriptions or other product content are accurate, complete, reliable, current, or error-free.
An AMI is a virtual image that provides the information required to launch an instance. Amazon EC2 (Elastic Compute Cloud) instances are virtual servers on which you can run your applications and workloads, offering varying combinations of CPU, memory, storage, and networking resources. You can launch as many instances from as many different AMIs as you need.
Version release notes
Latest OS patches installed. Simply run Windows update to install the latest Microsoft patches
AWS Support is a one-on-one, fast-response support channel that is staffed 24x7x365 with experienced and technical support engineers. The service helps customers of all sizes and technical abilities to successfully utilize the products and features provided by Amazon Web Services.
Enables seamless single sign-on across multiple applications including Amazon WorkMail, Amazon WorkSpaces, Amazon WorkDocs, Office 365, cloud-based SaaS applications, and corporate network applications using organizational directory credentials.
Multi-Factor Authentication Integration
Supports AWS Multi-Factor Authentication for enhanced security during federated application sign-in.
Modern Authentication Support
Implements modern authentication protocols with support for SAML 2.0 federation and interoperability with non-AD LDAP directories.
Passwordless Authentication Methods
Supports passwordless access mechanisms including Windows Hello for Business and compliant device-based authentication.
Access Control Policy Configuration
Provides access control policy configuration without requiring knowledge of claim rules language for managing sign-on to both modern and legacy applications.
Cloud Directory Identity Management
Centralize access across all identities with integrations to AWS Identity Center, Google Workspace, Microsoft 365, Active Directory, HRIS platforms, and network infrastructure resources
Single Sign-On and Multi-Factor Authentication
Frictionless, secure access to AWS resources and over 900 pre-built applications with automated user provisioning to Amazon IAM Identity Center and group-based permissions
Cross-Operating System Server and Device Management
Deploy, manage, and remotely assist AWS servers and corporate devices across Windows, macOS, iOS, Linux, AWS Linux AMIs, and Android from a single cloud platform
Passwordless and Conditional Access
Enable phishing-resistant access with passwordless SSO, password management, and conditional access controls to ensure only specific users on trusted devices and networks can access AWS resources
Unified Platform with Zero Trust Capabilities
Combine cloud directory identity management, access management, and cross-OS server and device management with enhanced IAM and device management controls to support Zero Trust security goals
Single Sign-On (SSO)
Automatically synchronizes users across multiple directories to enable one-click access to corporate applications on-premises and in the cloud with enforced security policies and self-service password reset capabilities.
Multi-Factor Authentication (MFA)
Supports multiple authentication methods including passwordless authentication, passkeys, one-time passcodes, push notifications, biometric data, and security keys with real-time reporting and monitoring of authentication events.
Adaptive Authentication
Delivers multi-layer, context-aware and risk-based protection to minimize common attacks and enforce contextual access security policies based on user behavior and risk assessment.
Identity Lifecycle Management
Provides role-based user provisioning engine with granular access permissions, least-privileged access controls, and automated user account provisioning across applications and AWS services.
Directory Integration
Acts as a secure cloud-based directory with integration capabilities for Active Directory, LDAP, G Suite and other external directories, plus pre-built connectors with thousands of third-party web applications and AWS services including AWS IAM, AWS SSO, Amazon Cognito, and Amazon EventBridge.