Request Active Directory over internet

Question

I am using C# and over internet, I want to do some operations on an Active Directory service :

• Authenticate user
• Get users / groups / computers list

For the first point, I think I could use ADFS to authenticate over the internet.

But how to request users / groups / computers list? Is it possible?

I don't think that ADFS permit that...

If yes, then I need some hints

Answer 1

ADFS does authentication not provisioning.

For that you need an Identity Manager or use the C# classes as above.

If you want a web service, create a web API, protect it with ADFS 4.0 and put the C# classes in that.