Final answer:
To provide extranet access to an internal AD FS farm, you must configure AD FS proxy servers, not install a new farm, upgrade servers, or deploy additional domain controllers. These proxy servers allow secure external user authentication requests to be proxied to the internal AD FS servers.
Step-by-step explanation:
To set up servers to provide extranet access to your internal AD FS (Active Directory Federation Services) farm, you must configure AD FS proxy servers. This involves setting up servers that will proxy the authentication requests from external users to your internal AD FS servers. These proxy servers act as an intermediary, allowing users outside the corporate network to access applications that rely on the AD FS for authentication without exposing your AD FS farm directly to the internet, adding a layer of security.
The key steps to configure AD FS proxy servers include:
- Installing the required software on the proxy servers.
- Configuring the proxy servers to communicate with the internal AD FS farm.
- Setting up the necessary firewall rules to allow traffic to and from the proxy servers.
Note that installing a new AD FS farm, upgrading existing AD FS servers, or deploying additional domain controllers are not necessary for the specific task of providing extranet access.