About the future of Active Directory and Federation Services:
"Microsoft recently laid out a future role for Active Directory in which it will employ user identity data to access applications and secure collaboration between users and partners on internal and external networks. Microsoft says the perimeter defense surrounding networks today can be replaced with a distributed security model that relies on sets of statements about a user, called a claim, to secure such tasks as verifying identity, validating payment or access, or personalizing services. Some users see the value in the model and some are already moving in that direction using Active Directory Federation Services (ADFS), which shipped with Windows Server 2003 Release 2 in early 2006, as an identity federation hub. Learn more by reading this April 26th NetworkWorld article."