Hi, What is your opinion about my describe messages?

If you are an administrator for the Contoso Corporation and Contoso is partnering with Litware.com, which will order products from Contoso. You need to deploy an application that Litware's users can access over the Internet. Describe your recommended solution.

My describe:

The solution that would best meet this need is using Active Directory Federation Services (AD FS), which would allow users in the Litware domain to access applications in the Contoso domain across the web and authenticate using their local credentials. To make this create, you would setup Contoso as the Resource organization, which is the organization that has the resource being accessed, and setup Litware as the Account organization, which is the organization accessing the web resource. A Federated Trust Relationship would need to be formed between both domains and claims-based access control would use a trusted identity provider to authenticate the users. When a user from Litware wants to access the application on Contoso they would be issued a token, which would then be presented to the application as proof of being allowed to use it. This allows users to authenticate based on their own Active Directory and using their current credentials. All of this communication is automatically done over HTTPS.

Thank you for your feedback,

Abby