How does AD FS work?

Rebeladmin Inc. is an IT service provider. There are many customers who use different IT and cloud services from the company. Recently, the company introduced a new web-based control panel where customers can access their resources. The same application also used internal staff to manage the infrastructure services. Rebeladmin Inc. uses Active Directory Domain Service (AD DS) to manage identities. When the internal IT staff logs into the portal, it doesn't ask for any login details. It is because the web application uses integrated Windows authentication (IWF) to allow access. This is also called NTLM authentication or domain authentication. It doesn't prompt for the login information initially and transfer hashed data about the current logged in user to the web server and check if it's allowed. This web server is domain-joined and the application...