Identity with Windows Server 2016 — Question 106

You have a server named Server1 that has the Active Directory Federation Services server role installed.
You need to configure Server1 as the authorization server. Server1 will be used to authorize access to a web API from a web application. The web application will use OAuth 2.0 and OpenID Connect to access the web API as the authenticated user. The solution must minimize administrative effort.
What should you do first?

Answer options

• A. Run New-AdfsApplicationGroup
• B. Add a web API application
• C. Run Add-AdfsNativeClientApplication
• D. Run Add-AdfsWebApiApplication

Correct answer: D

Explanation

The correct answer is D because running Add-AdfsWebApiApplication is the appropriate first step to register a web API application with AD FS. The other options are either related to different types of applications or are not the initial steps needed for configuring a web API authorization server.