Active Directory Federation Services Experts in Germany
in minutes with vetted, available specialists and the power of AI.Hire experts who configure AD FS trust relationships, claims rules, and SSO flows for Microsoft identity stacks, partner access, and hybrid sign-in setups. Get fast, precise matching with vetted, available freelancers.
Meet FRATCH Experts in Germany, who have recently used Active Directory Federation Services
Markus Halbedel
Last position:
Senior M365 Consultant at BITMARCK GmbH
Creation of concepts for M365 implementation, especially Tenants, EntraID, EntraConnect and ExchangeOnline, taking BAS standards into account (mandatory baseline security requirements) in the project "Concept M365" with the aim of transferring the concepts to the M365 environments of Bitmarck and then handing them over to the customer.
- Creation of a current-state analysis of the existing M365 environments as well as the on-premises environments and the BAS standards.
- Creation of concepts for the topics Tenants, EntraID, EntraConnect and ExchangeOnline taking the BAS standards into account
- Design and implementation of an automated solution for creating standardized M365 tenants based on Microsoft M365 DSC (Desired State Configuration)
- Transfer of the concepts into the M365 environments
- Creation of detailed technical documentation
Peter Fleischer
Last position:
Subproject Manager and Solution Architect - Microsoft 365 Transformation at Automotive Industry
Integration of highly regulated countries such as China and South Korea into a company-wide M365 tenant.
Technical contact for integrating special requirements for the executive board and German subsidiaries that are subject to BaFin compliance requirements.
Subproject management.
Coordination of requirements within the overall architecture.
Design of the use of DLP features from Microsoft Purview.
Design of special access restrictions via Entra ID Conditional Access.
Support in designing the provisioning of Teams teams and SharePoint sites with higher compliance requirements.
Technical support for implementing information classification with sensitivity labels for SharePoint Online and Teams.
Technical support for the subproject introducing CoPilot for M365.
Skills: M365, Purview, DLP, Entra ID, Sensitivity Labels, CoPilot, Teams, SharePoint Online.
Vicenco Kenk
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
George Ojog-Schulze
Last position:
IT Senior Consultant at Data Group
- IT Senior Consultant (bank infrastructure, Active Directory, Azure, security, PKI)
- Planning, design, and implementation of cloud solutions based on Microsoft Azure / M365
- Teams, M365, and cloud services
- Vulnerabilities, threats, attacks
- Security analysis, security policy, security architecture
- Conducting meetings and presentations at various management levels
- Organizing and leading team meetings to improve internal communication
- Tools: PowerShell, Active Directory, GPO, DNS, DHCP, scripting
Alexander Schulze
Last position:
AI Consultant for AI Voice Bot System at Rudolf Hörmann GmbH & Co.KG
- Consultant for system architecture, AI agents & integration, coach for data & process logic, Graph-RAG approaches, security and data protection.
- On-premise AI solutions with high compliance and performance requirements.
- Architecture decisions, operational setup, strategic prioritization & deployment.
- Technologies: LiveKit JS SDK, LiveKit Agents, Web Audio API, JS, AudioWorklet, Loki, vLLM, Zscaler, Docker, Neo4j, MySQL, Python.
- Models: GPT-OSS 20B, Whisper large v3 turbo, Qwen3-TTS.
Markus Ickenroth
Last position:
Senior System Engineer Microsoft at Technidata IT-Service GmbH
As part of the project, I was responsible for operating a Citrix farm for 600 users, including optimizing the user experience and ensuring high availability.
I managed and optimized the entire application landscape of a major customer, evaluated and implemented application updates, and ensured the compatibility and security of the software in use.
I managed user accounts, implemented security policies, and monitored system performance.
I administered Azure Entra ID to control identities and access rights, implemented security policies, and synchronized on-premises directories with the cloud.
I implemented and managed Microsoft Intune for central management of client devices, including the configuration and management of BitLocker for disk encryption.
I managed file servers and NTFS permissions to ensure secure and efficient data access management.
I handled change requests and last-level support tickets efficiently to solve complex system issues and improve user satisfaction.
I supported and advised the customer team on various topics and projects, identified areas for improvement, and implemented best practices.
Technologies used:
- Citrix XenApp and XenDesktop
- Microsoft Windows Server 2012R2 and 2022
- Exchange 2016 and Exchange Online
- Entra ID (Azure AD)
- Entra ID Connect
- BitLocker
- PowerShell scripting
- Microsoft Intune
- LDAP (Lightweight Directory Access Protocol)
- DNS services (Domain Name System)
- Active Directory Certificate Services (AD CS)
Mario Jelinski
Last position:
Architect / Developer at handyhase
- Overhaul of the entire design and implementation of new UI/UX aspects using React
- Planning of the software architecture and structuring of the project for long-term scalability using Git for version control
Peter Streibel
Last position:
Rollout Manager at Siemens Healthineers
- Cisco SDA LAN network
- Transition and transformation
Nermin Kasumovic
Last position:
Service Manager, Change Manager, Project Manager at ITZ-Bund
- Responsible for service management and change management within the ITZ-Bund network.
- Creating, tracking, and modifying change requests for applications and infrastructure at ITZ-Bund.
- Adapting and extending change management processes.
- Ensuring required technical functionality of specific applications (beBPo Web, Governikus Multi Messenger GMM).
- Project management activities for individual projects within the ITZ-Bund network.
- Managing and ensuring availability of external service providers (Governikus, Materna).
- Participation in an FMS audit (documentation description, processes, quality) for individual agencies of ITZ-Bund.
- Monitoring deadlines and milestones, reporting project progress to various stakeholders.
- Single point of contact (SPOC) for various departments, weekly fixed meetings with clients and status meetings.
- Creating and planning infrastructure G2X maps, monitoring, and status reporting to clients and external service providers.
- Participation in certificate requests and certificate exchange for customer-specific infrastructure and applications.
- Planning, coordinating, and executing communication for announcing, carrying out, and following up on planned activities.
- Monitoring effort and developing improvement suggestions.
- Skills/Tools: ITIL, Prince 2, Windows 10, Microsoft Office, Governikus products, Materna products, Confluence, Jira, BMC Remedy, Smart IT
Pierre Gronau
Last position:
Ansible Automation, Windows Third Level Support at DB InfraGO AG
- PRISMA project
- Ansible automation
- Windows third level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019
Andreas Nolden
Last position:
Open Source Founder at Privatier
- AI-supported source code analysis
- AI image generation for a shirt shop
- AI-supported analysis of connected YouTube channels and commenting users
- AI-supported software prototyping
- Operation of a local AI environment
- 3D printing and scanning: development of a process to repair GfK parts using 3D-printed negative molds
The focus is on practical applications of new technologies, founding an open-source project for a yacht autopilot, as well as yacht refit and motorhome conversion.
Ransford Annan
Last position:
Volunteer IT & Cybersecurity Team Lead at Farm House Organic
- Led remote IT and cybersecurity operations, including secure device provisioning, app deployment, compliance monitoring, and endpoint security with Microsoft Intune and Defender for Endpoint.
- Managed Identity and Access Management (IAM) with Microsoft Entra ID, including implementing role-based access control, conditional access, VPN configuration, and multi-factor authentication (MFA).
- Maintained and secured Cloud PCs, provided technical remote support, and optimized performance within the Microsoft 365 Business environment.
Peter Voloshin
Last position:
IT Consultant at Evotec KG
- Operation and administration of Windows 2016 / 2019 servers and domains
- Infrastructure services (Active Directory, ADFS, AD Azure Connect, DHCP, DNS, Group Policies)
- Consulting, support and troubleshooting of customer systems
- Documentation and concept design in the area of MS Active Directory
- Updating operation, process and system documentation
- Ticket handling (remote analysis and resolution via incident, change and problem management)
- Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMware vSphere, CheckMK, Exchange 2019, PowerShell, Jira, Confluence, Office 365, Matrix42, NetApp, Ansible
Marco Fischer
Last position:
System Engineer–Vmware, Veeam at DCSO
- About 800 different server VMs, operation and lifecycle/asset management of about 40 ESXi hosts (Lenovo)
- Upgrade of all clusters to ESXi/VCSA 7.0U3 and 8. Planning patch management for all hosts
- Cleaning up the AD – many different domains that all needed to be migrated into the main environment. Planning/execution
- Veeam – check the configuration and migrate to a newer, partly virtual infrastructure to make the setup leaner and faster
- VMware – upgrades/updates, general maintenance
- Proxmox POC – evaluate if an alternative to VMware
- Documentation for Veeam/VMware/storage
- Implementation of the uniflow cloud solution
- NetApp migration to new storage, CIFS maintenance and administration of SVMs
Hans Kula
Last position:
Senior IT-Operations Specialist at Carl Zeiss Digital Innovation
- Technical and strategic support for the task force to build a globally available service unit focused on Microsoft Azure Cloud under the Follow the Sun principle and SAFe
Discover over 15,000 top freelancers
Statistics of experts using Active Directory Federation Services
Aggregated from the professional profiles of matched freelancers.
Experience
28 years
Position duration
1.4 years
Positions per freelancer
25
Top business areas
Information Technology, Operations, Project Management
Top industries
Information Technology, Manufacturing, Banking and Finance
Certification focus areas
Information Technology, Project Management, Business Intelligence
Bachelor's degree or higher
55%
Master's degree or higher
18%
Certifications per freelancer
6
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 30 Aug 2026.
Daily rate distribution
The chart shows how the daily rates of freelancers in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows how many freelancers charge within that range.
Average rates of experts in Germany using Active Directory Federation Services
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 30 Aug 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
About the technology
Federation access
Active Directory Federation Services, often called AD FS or ADFS, provides federated sign-in for Microsoft-based environments. It lets users move between internal apps, partner portals, and cloud services without repeated logins. Companies bring in specialists when identity needs to stay under their control.
What it connects
- Claims-based access for web apps and portals
- Single sign-on with Microsoft Entra ID and other identity systems
- Trust setup for partner and supplier access
- Secure sign-in for hybrid workloads and legacy apps
Core work
Strong professionals design relying party trusts, claims rules, and certificate settings that keep authentication stable. They also test token issuance, login flows, and certificate rollover before changes go live. In Germany, this often supports distributed teams that need clear coordination across office and remote users.
Ecosystem skills
AD FS sits close to Windows Server, Active Directory, certificates, DNS, and PowerShell. Many projects also touch Entra Connect, SAML, WS-Federation, OAuth-related sign-in patterns, and reverse proxy components. The best specialists understand how these pieces fail together, not just on their own.
When companies need help
- New federation rollout after a merger or partner launch
- Broken sign-in after a certificate or trust change
- Legacy app access that cannot move to modern auth yet
- Security review before tightening identity controls
Strong delivery
A good freelancer documents every trust, keeps changes reversible, and explains tradeoffs in plain language. They know when AD FS is the right fit and when a different identity path is safer. They leave behind clean config, tested recovery steps, and fewer surprises for the next change.
Frequently asked questions
Questions about Active Directory Federation Services? Start with the answers below.
Active Directory Federation Services is used for federated sign-in, single sign-on, and claims-based access in Microsoft identity environments. It is common when a company wants users to access internal apps, partner portals, or cloud services without separate passwords for each system.
AD FS still matters when organizations need on-premises control, legacy app support, or specific federation flows that do not map cleanly to modern cloud identity. It is often weighed against Entra ID, and the right choice depends on where the apps live and how much identity control the company needs.
A strong AD FS specialist usually knows Active Directory, certificates, DNS, Windows Server, and PowerShell. They should also understand claims rules, SAML, WS-Federation, and how to trace sign-in failures across related systems.
An Active Directory Federation Services project needs someone who has already handled trust setup, certificate renewal, and troubleshooting under real conditions. Simple changes can be straightforward, but production identity work benefits from a professional who has seen failed logins, proxy issues, and token problems before.
Yes, AD FS often appears in hybrid identity setups that also involve Microsoft 365 and Entra Connect. It can support sign-in paths for cloud services while keeping authentication logic tied to on-premises Active Directory and existing security rules.
ADFS is a federation service; SAML is one of the protocols it can use. In practice, ADFS provides the trust and token service, while SAML defines part of the sign-in exchange with the app or partner system.
Most Active Directory Federation Services work can be done remotely if the specialist has secure access and clear change windows. On-site help is useful when the environment is tightly restricted, the identity stack is sensitive, or local coordination with infrastructure teams is easier in Germany.
Look for clear trust documentation, careful certificate handling, and practical troubleshooting steps, not just theory. A good AD FS freelancer explains what changed, what was tested, and how the setup will be supported after handover.
The average hourly rate of freelancers in Germany who have used Active Directory Federation Services in their recent projects is 101 €, which corresponds to a daily rate of about 812 € based on an 8-hour working day.
Of the freelancers in Germany who have used Active Directory Federation Services in their recent projects, 55% hold at least a Bachelor's degree and 18% hold at least a Master's degree.
On average, freelancers in Germany who have used Active Directory Federation Services in their recent projects have 28 years of professional experience, with a single engagement typically lasting around 1.4 years.
The most common languages among freelancers in Germany who have used Active Directory Federation Services in their recent projects are German (100%), English (93%), and French (33%).
The most common industries among freelancers in Germany who have used Active Directory Federation Services in their recent projects are Information Technology (100%), Manufacturing (93%), and Banking and Finance (87%).
The most common business areas among freelancers in Germany who have used Active Directory Federation Services in their recent projects are Information Technology (100%), Operations (87%), and Project Management (87%).
Main locations of FRATCH Experts, who have recently used Active Directory Federation Services
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
