Your network consists of one Active Directory forest named contoso.com. The functional level of the contoso.com forest is Windows Server 2008.
The network contains seven servers that run Internet Information Services (IIS) 7.0 and host Web services.
Remote users from a partner company access the Web services through HTTPS. The partner company has a separate Active Directory forest named fabrikam.com. The functional level of the fabrikam.com forest is Windows Server 2003.
You need to recommend an authentication solution for the fabrikam.com users. The solution must meet the following requirements:
- All communications between both forests must use only HTTPS.
- Remote users must only authenticate once to access all Web services.
- Users from fabrikam.com must access the Web services by using user accounts in the fabrikam.com forest.
What should you recommend?
A. Implement Client Certificate Mapping Authentication on the IIS servers.
B. Implement Microsoft Identity Lifecycle Manager (ILM) 2007 on the contoso.com forest.
C. Implement a forest trust between the contoso.com and the fabrikam.com forests. Configure the forest trust to use Selective Authentication.
D. Implement Active Directory Federation Services (AD FS) in the contoso.com forest. Create a federation trust between the contoso.com forest and the fabrikam.com forest.
