A Windows role that issues security tokens based on on-premises Active Directory identities, enabling single sign-on to external or cloud applications through standards such as SAML, OAuth, and OpenID Connect. It acts as an identity provider in a federation trust.
Active Directory Federation Services (AD FS)
