title: SSO (Single sign-on) and ADFS (Active Directory Federation Services) with Ruby On Rails
body: <p>I'm trying to understand how to integrate SSO (Single sign-on) and ADFS (Active Directory Federation Services) into an existing Ruby On Rails application hosted on a linux environment served by nginx.</p>
  
  <p>Considering a <strong>partner</strong> (a company using Active record directory) and a <strong>service provider</strong> (the rails application).</p>
  
  <p>It seems that the service provider web server must run an ADFS Web Agent that will handle the authentication process with the partner and ultimately redirect the user to the rails app with a token an a claim that would be used to identify the user in the app.</p>
  
  <p>My main concern is about this ADFS Web Agent:</p>
  
  <p><strong>Am I understanding correctly that it must be running on the service provider side ?</strong> (I'm not interested on the partner side). If so, what would be the best way to integrate ADFS SSO with our app that is served by nginx on a linux OS? Do I need a windows server running a federation server ?</p>
  
  <p>Thank you in advance for any help !</p>