Active Directory Federation Services (ADFS) was included in the Common Criteria validation of Microsoft Windows XP and Windows Server 2003 R2. Please see the Security Target (ST) for details: http://www.niap-ccevs.org/cc-scheme/st/vid10184/ Guidance documentation