Active Directory Federation Services Experts in Germany
matched in minutes with vetted, available specialists and the power of AIHire experts who connect enterprise identities, configure SSO and claims-based access, and integrate Microsoft Entra ID with on-premises environments. FRATCH matches you quickly and precisely with vetted, available freelancers for your project.
Meet FRATCH Experts in Germany, who have recently used Active Directory Federation Services
Mohammed N.
Last position:
IT System Manager at Corporate Network Solution Provider
- Architected, Deployed and Supported hosted email solutions in Linux and Windows environments with enterprise-grade anti-spam and security architecture for service-provider environments.
- Managed Microsoft Azure environments including Virtual Machines, VNets, Storage, VPN, and Firewall configuration.
- Administered Microsoft Exchange Server (2010-2019), Microsoft Exchange Server SE, Active Directory, PKI, Hyper-V and Zimbra environments with disaster recovery planning and operational support.
- Led Microsoft 365 onboarding and migration projects from Exchange, IMAP, and Zimbra platforms to Microsoft 365.
- Prepare security and compliance to support Microsoft 365 Copilot.
- Implement information protection and data loss prevention by using Microsoft Purview.
- Implement retention, eDiscovery, and communication compliance in Microsoft Purview.
- Integrated Active Directory Domain Services (AD DS), Active Directory Certificate Services (AD CS), and Active Directory Federation Services (AD FS).
- Delivered secure hybrid infrastructure solutions integrating Microsoft Windows Server and Linux-based enterprise environments.
- Supported enterprise integration projects involving Debian, Ubuntu, CentOS, Red Hat, Barracuda ESG, Qmail and Zimbra Platforms.
Peter V.
Last position:
IT Administrator at SEAT Deutschland
- Creating concepts and architecture for domain integration (SEAT into the VW structure)
- Domain trusts and administration
- Operation and administration of Windows 2022/ 2025 servers and domains
- Domain restructuring
- GPO and SG editing and migration
- DNS restructuring and migration
Technologies: Windows 2022, Active Directory, ADFS, AD Azure Connect, DHCP, DNS, GPO, VMWare vSphere, Hyper-V, Powershell, Jira, MS Office 365,), SCCM, VSAN Fileservices, Approximately 800 servers, 400 users
Peter F.
Last position:
Subproject Manager and Solution Architect - Microsoft 365 Transformation at Automotive Industry
Integration of highly regulated countries such as China and South Korea into a company-wide M365 tenant.
Technical contact for integrating special requirements for the executive board and German subsidiaries that are subject to BaFin compliance requirements.
Subproject management.
Coordination of requirements within the overall architecture.
Design of the use of DLP features from Microsoft Purview.
Design of special access restrictions via Entra ID Conditional Access.
Support in designing the provisioning of Teams teams and SharePoint sites with higher compliance requirements.
Technical support for implementing information classification with sensitivity labels for SharePoint Online and Teams.
Technical support for the subproject introducing CoPilot for M365.
Skills: M365, Purview, DLP, Entra ID, Sensitivity Labels, CoPilot, Teams, SharePoint Online.
Vicenco K.
Last position:
ITSM Project Manager (self-employed)
Unified ITSM framework
- Definition of a company-wide ITSM target picture
- Introduction of a uniform service structure across all business units
SLA and OLA management
- Building a standardized SLA framework
- Definition of service classes (Business Critical, Standard, Low Priority)
- Introduction of OLAs between internal teams
- Building meaningful SLA reporting
- Definition of KPI and service dashboards for business units
Service portfolio management
- Definition of service descriptions
- If needed, preparing possible cost and service billing
Ticketing & processes
- Incident management
- Uniform ticket categories
- Standardized prioritization
- Escalation matrix
- Automations
- Self-service optimization
Request fulfillment
- Service catalog across all business units
- Approval workflows
Problem management
- Introduction of root cause analysis
- Known error database
- Problem review process
Complete asset management concept
- Hardware lifecycle management
- Software lifecycle management
- Leasing lifecycle
- Mobile device lifecycle
- Monitor lifecycle
- Phone lifecycle
Processes
- Procurement
- Goods receipt
- Inventory
- Assignment
- Return
- Disposal
- Leasing return Goal: single source of truth for all assets
CMDB design
- Definition of all configuration items:
- Workplace
- Notebooks
- Monitors
- Mobile phones
- Printers
Infrastructure
- Servers
- Firewalls
- Switches
- WLAN
- Storage
- Backup systems
Cloud
- Azure resources
- Microsoft 365
- SaaS services
Relationships
- User ↔ Asset
- Asset ↔ Service
- Service ↔ Infrastructure
- Location ↔ Asset
- Goal: make all service dependencies visible
Software asset & license management
- License management concept
- License balancing
- Compliance reporting
- Microsoft license management
- Adobe license management
- SaaS management
- Contract management
- Renewal management
Interfaces & automation Existing systems
- Workday
- Joiner
- Mover
- Leaver
TESMA
- Leasing data
- Contract data
Matrix42
- Asset synchronization
- User synchronization
Active Directory / Entra ID
- User management
Microsoft 365
- License assignment
- Group management
Dormakaba
Access processes
Lifecycle services
Monitoring platforms
- PRTG
- Palo Alto
- Cisco
Reporting & KPI framework
- Definition of a management dashboard
- KPIs
- Ticket volume
- SLA fulfillment
- MTTR
- First resolution rate
- Asset accuracy
- License compliance
- Change success rate
- Service availability
- Degree of automation
Network redesign support
- Governance
- Support of the network redesign from an ITSM point of view
- Definition of affected services
- Change management structure
- Communication concept
CMDB integration
- Recording of all network components
- Service mapping
- Dependency analysis
Validation of documentation and knowledge base articles
- Network documentation
- Operations documentation
- Standard changes
Monitoring & event management
- Target picture
- Central monitoring concept
- Event management process
- Alerting strategy
- Escalation model
Systems
Cisco
Palo Alto
Fortinet
Rubrik
Veeam
Matrix42
Azure
Microsoft 365 Automation
Ticket creation from monitoring
Escalations
Standard actions
Audit, compliance & information security
- ISO 27001 consulting
- TISAX consulting
- NIS2 preparation - consulting
- Audit-ready processes
- Documentation structure
- Evidence tracking in Matrix42
Roadmap
- 12-month roadmap
- Prioritization of all measures
- Quick wins
- Medium-term projects
- Long-term target picture
- Documentation
Peter S.
Last position:
Rollout Manager at Siemens Healthineers
- Cisco SDA LAN network
- Transition and Transformation
Ransford A.
Last position:
Volunteer IT & Cybersecurity Team Lead at Farm House Organic
- Led remote IT and cybersecurity operations, including secure device deployment, app distribution, compliance monitoring, and endpoint security using Microsoft Intune and Defender for Endpoint.
- Managed Identity and Access Management (IAM) with Microsoft Entra ID, including implementing role-based access control, conditional access, VPN configuration, and Multi-Factor Authentication (MFA).
- Supported and secured Cloud PCs, provided technical remote support, and optimized performance within the Microsoft 365 Business environment.
Pierre G.
Last position:
Ansible Automation, Windows Third Level Support at DB InfraGO AG
- PRISMA project
- Ansible automation
- Windows third-level support for Windows NT, Windows 2000, Windows 2013, Windows 2016, Windows 2019
Alexander S.
Last position:
AI Consultant for AI Voice Bot System at Rudolf Hörmann GmbH & Co.KG
- Consultant for system architecture, AI agents & integration, coach for data & process logic, Graph-RAG approaches, security and data protection.
- On-premise AI solutions with high compliance and performance requirements.
- Architecture decisions, operational setup, strategic prioritization & deployment.
- Technologies: LiveKit JS SDK, LiveKit Agents, Web Audio API, JS, AudioWorklet, Loki, vLLM, Zscaler, Docker, Neo4j, MySQL, Python.
- Models: GPT-OSS 20B, Whisper large v3 turbo, Qwen3-TTS.
Markus I.
Last position:
Senior System Engineer Microsoft at Technidata IT-Service GmbH
As part of the project, I was responsible for operating a Citrix farm for 600 users, including optimizing the user experience and ensuring high availability.
I managed and optimized the entire application landscape of a major customer, evaluated and implemented application updates, and ensured the compatibility and security of the software in use.
I managed user accounts, implemented security policies, and monitored system performance.
I administered Azure Entra ID to control identities and access rights, implemented security policies, and synchronized on-premises directories with the cloud.
I implemented and managed Microsoft Intune for central management of client devices, including the configuration and management of BitLocker for disk encryption.
I managed file servers and NTFS permissions to ensure secure and efficient data access management.
I handled change requests and last-level support tickets efficiently to solve complex system issues and improve user satisfaction.
I supported and advised the customer team on various topics and projects, identified areas for improvement, and implemented best practices.
Technologies used:
- Citrix XenApp and XenDesktop
- Microsoft Windows Server 2012R2 and 2022
- Exchange 2016 and Exchange Online
- Entra ID (Azure AD)
- Entra ID Connect
- BitLocker
- PowerShell scripting
- Microsoft Intune
- LDAP (Lightweight Directory Access Protocol)
- DNS services (Domain Name System)
- Active Directory Certificate Services (AD CS)
Mario J.
Last position:
Architect / Developer at handyhase
- Overhaul of the entire design and implementation of new UI/UX aspects using React
- Planning of the software architecture and structuring of the project for long-term scalability using Git for version control
George O.
Last position:
IT Senior Consultant at Data Group
- IT Senior Consultant (bank infrastructure, Active Directory, Azure, security, PKI)
- Planning, design, and implementation of cloud solutions based on Microsoft Azure / M365
- Teams, M365, and cloud services
- Vulnerabilities, threats, attacks
- Security analysis, security policy, security architecture
- Conducting meetings and presentations at various management levels
- Organizing and leading team meetings to improve internal communication
- Tools: PowerShell, Active Directory, GPO, DNS, DHCP, scripting
Markus H.
Last position:
Senior Consultant Email Security & Messaging at Industrial company, building technology, international
Restructuring email authentication across the entire domain inventory of an international industrial company with 1,000 to 5,000 users: around 45 domains in more than 20 countries.
- Inventory of all domains and classification as sending, non-sending, or unclear; target design for each domain group
- DMARC reporting (rua) as the data basis before any policy tightening, with aggregate reports analyzed over several weeks
- SPF lookup budget (limit of 10 lookups) counted rather than estimated; several assumptions from previous findings were thus disproved
- Analysis of the multi-stage mail flow across on-premises Exchange, Microsoft 365, and security gateways, and its impact on DKIM alignment and SPF
- Assessment of external findings based on evidence: confirmed, false positive, or context-dependent, with justified disagreement presented to the assessor
- Change proposals with before/after state, risk, and rollback; implementation is handled by the customer
- Tenant-to-tenant migration analysis for a group company: read-only audit, technical assessment, management summary, migration paths
- Analysis of a service shared mailbox according to CISO and data protection requirements: anonymized in the transformation layer, without personal data analysis
Technologies: Exchange Online, Exchange Hybrid, Entra ID, Microsoft Graph, PowerShell, SPF, DKIM, DMARC, MTA-STS, TLS-RPT, Power BI
Nermin K.
Last position:
Service Manager, Change Manager, Project Manager at ITZ-Bund
- Responsible for service management and change management within the ITZ-Bund network.
- Creating, tracking, and modifying change requests for applications and infrastructure at ITZ-Bund.
- Adapting and extending change management processes.
- Ensuring required technical functionality of specific applications (beBPo Web, Governikus Multi Messenger GMM).
- Project management activities for individual projects within the ITZ-Bund network.
- Managing and ensuring availability of external service providers (Governikus, Materna).
- Participation in an FMS audit (documentation description, processes, quality) for individual agencies of ITZ-Bund.
- Monitoring deadlines and milestones, reporting project progress to various stakeholders.
- Single point of contact (SPOC) for various departments, weekly fixed meetings with clients and status meetings.
- Creating and planning infrastructure G2X maps, monitoring, and status reporting to clients and external service providers.
- Participation in certificate requests and certificate exchange for customer-specific infrastructure and applications.
- Planning, coordinating, and executing communication for announcing, carrying out, and following up on planned activities.
- Monitoring effort and developing improvement suggestions.
- Skills/Tools: ITIL, Prince 2, Windows 10, Microsoft Office, Governikus products, Materna products, Confluence, Jira, BMC Remedy, Smart IT
Andreas N.
Last position:
Open Source Founder at Privatier
- AI-supported source code analysis
- AI image generation for a shirt shop
- AI-supported analysis of connected YouTube channels and commenting users
- AI-supported software prototyping
- Operation of a local AI environment
- 3D printing and scanning: development of a process to repair GfK parts using 3D-printed negative molds
The focus is on practical applications of new technologies, founding an open-source project for a yacht autopilot, as well as yacht refit and motorhome conversion.
Marco F.
Last position:
System Engineer–Vmware, Veeam at DCSO
- About 800 different server VMs, operation and lifecycle/asset management of about 40 ESXi hosts (Lenovo)
- Upgrade of all clusters to ESXi/VCSA 7.0U3 and 8. Planning patch management for all hosts
- Cleaning up the AD – many different domains that all needed to be migrated into the main environment. Planning/execution
- Veeam – check the configuration and migrate to a newer, partly virtual infrastructure to make the setup leaner and faster
- VMware – upgrades/updates, general maintenance
- Proxmox POC – evaluate if an alternative to VMware
- Documentation for Veeam/VMware/storage
- Implementation of the uniflow cloud solution
- NetApp migration to new storage, CIFS maintenance and administration of SVMs
Discover over 15,000 top freelancers
Statistics of experts using Active Directory Federation Services
Aggregated from the professional profiles of matched freelancers.
Experience
29 years
Position duration
1.6 years
Positions per freelancer
21
Top business areas
Information Technology, Project Management, Operations
Top industries
Information Technology, Manufacturing, Banking and Finance
Certification focus areas
Information Technology, Project Management, Business Intelligence
Bachelor's degree or higher
58%
Master's degree or higher
25%
Certifications per freelancer
7
Most common languages
German, English, French
Speak two or more languages
100%
Based on our profile pool as of 29 Oct 2026.
Daily rate distribution
The chart shows how the daily rates of experts in this technology in Germany are distributed, based on recent contracts on our platform. Each bar covers a rate range — its height shows the share of experts charging within that range.
Average rates of experts in Germany using Active Directory Federation Services
Rates are based on recent contracts and do not include FRATCH margin.
The average daily rate is the mean of all daily rates from recent contracts of comparable freelancers on our platform.
The median daily rate is the middle value of all daily rates — half of comparable freelancers charge less, half charge more. Unlike the average, it is barely affected by outliers.
Calculated based on our freelancers’ daily rates as of 29 Oct 2026. Actual rates may vary depending on seniority level, experience, skill specialization, project complexity, and engagement length.
Active Directory Federation Services experts industry focus
See which industries our matched freelancers work in most often — every figure is calculated live from the freelancers on FRATCH.
- Information Technology (100%)
- Manufacturing (88%)
- Banking and Finance (75%)
- Automotive (69%)
- Healthcare (50%)
- Telecommunication (50%)
- Professional Services (44%)
- Government and Administration (44%)
Please note that freelancers can work across multiple industries, so percentages overlap.
About the technology
Federation Basics
Active Directory Federation Services, commonly called AD FS or ADFS, is a Microsoft identity service for exchanging authentication and authorization claims between trusted organizations and applications. It lets users sign in with existing Active Directory credentials while accessing internal and external services through single sign-on.
Identity Architecture
AD FS sits between Active Directory Domain Services and relying parties such as web applications, SaaS services and partner systems. Specialists design federation trusts, claims rules, token issuance and certificate usage, while accounting for forests, domains, proxies and Microsoft Entra ID integration.
Common Deliverables
- Configure SAML, WS-Federation and OAuth or OpenID Connect integrations where supported
- Establish relying-party trusts and claims transformation rules
- Connect on-premises Active Directory with Microsoft Entra ID
- Replace legacy authentication flows with secure single sign-on
- Document federation topology, certificates and operational procedures
When Expertise Matters
Companies bring in freelance specialists during identity migrations, application onboarding, domain consolidations and security reviews. They are also useful when sign-in failures, token errors or certificate expirations affect business-critical systems. In Germany, remote delivery often works well, while regulated environments may require on-site workshops and German-language documentation.
Tools and Adjacent Skills
Strong professionals work with Windows Server, Active Directory Domain Services, DNS, PowerShell, IIS and network security controls. They understand Microsoft Entra Connect, Microsoft Entra ID, SAML assertions, WS-Trust, certificates, load balancing and conditional access. Monitoring, logging and structured change management are equally important for stable federation.
What Good Looks Like
A capable specialist begins with trust boundaries, user journeys and application constraints rather than copying a standard configuration. They test claims and token lifetimes, plan certificate rollover, secure endpoints and define recovery steps. They explain risks clearly, separate legacy dependencies from target-state design and leave an audit-ready configuration that internal teams can operate.
Frequently asked questions
Questions about Active Directory Federation Services? Start with the answers below.
Active Directory Federation Services is used to provide single sign-on and federated identity across trusted applications, organizations and services. It allows users to authenticate with existing Active Directory accounts while applications receive the claims they need without storing those credentials.
AD FS is primarily an on-premises federation service that gives an organization direct control over identity flows and federation trusts. Microsoft Entra ID is a cloud identity service with broader managed capabilities, so companies often assess whether to retain AD FS, simplify it or migrate selected applications.
A strong Active Directory Federation Services specialist usually understands Active Directory Domain Services, DNS, PowerShell, IIS, certificates and network security. Experience with Microsoft Entra Connect, SAML, WS-Federation, OpenID Connect and application troubleshooting is also valuable.
The right AD FS experience depends on the scope. A simple relying-party trust may need focused configuration skills, while a migration, multi-forest design or security remediation calls for someone who can assess architecture, dependencies, certificates, claims and recovery procedures.
Active Directory Federation Services projects can often be delivered remotely through secure access, structured workshops and shared documentation. On-site work may still help with restricted networks, identity governance sessions or teams that require German-language collaboration and operational handover.
An experienced AD FS specialist traces the complete authentication flow from the user and application through the federation service and Active Directory. They inspect event logs, claims, token signatures, certificates, DNS, time synchronization and trust configuration before changing production settings.
A company may hire an Active Directory Federation Services freelancer for application federation, identity consolidation, Microsoft Entra ID migration, certificate rollover or a security review. External expertise is especially useful when internal teams need a focused assessment without taking ownership away from operations.
Look for a AD FS professional who can explain claims, trust relationships, certificate lifecycle and failure recovery in clear terms. Ask for examples of documented designs, testing plans and controlled changes, and check whether they understand both legacy dependencies and the organization’s intended identity direction.
The average hourly rate of freelancers in Germany who have used Active Directory Federation Services in their recent projects is 100 €, which corresponds to a daily rate of about 798 € based on an 8-hour working day.
Of the freelancers in Germany who have used Active Directory Federation Services in their recent projects, 58% hold at least a Bachelor's degree and 25% hold at least a Master's degree.
On average, freelancers in Germany who have used Active Directory Federation Services in their recent projects have 29 years of professional experience, with a single engagement typically lasting around 1.6 years.
The most common languages among freelancers in Germany who have used Active Directory Federation Services in their recent projects are German (100%), English (94%), and French (31%).
The most common industries among freelancers in Germany who have used Active Directory Federation Services in their recent projects are Information Technology (100%), Manufacturing (88%), and Banking and Finance (75%).
The most common business areas among freelancers in Germany who have used Active Directory Federation Services in their recent projects are Information Technology (100%), Project Management (81%), and Operations (69%).
Main locations of FRATCH Experts, who have recently used Active Directory Federation Services
Our freelancers and interim experts are at home across the DACH region — available on-site in the major business hubs or fully remote. Choose a location to discover matched specialists, local market insights and up-to-date availability.
Berlin Hamburg Munich Cologne Frankfurt Stuttgart Dusseldorf Leipzig Dortmund Essen Bremen Dresden Hanover Nuremberg Request a free demo
Get in touch with the FRATCH team and we will get back to you within 4 hours.
Would you rather directly get in touch?
We always have the time for a call or email!
Philipp Thomaschewski
FRATCH CEO
