We have a potential client that wants us to host a SharePoint site at a co-location. They have AD at their home office. They want SSO for this SP site and to be able to manage password resets and other account stuff themselves. I'm just learning about both ADFS and FIM.
My initial idea was to setup a new domain and ADFS at the colo site, then a FIM server as well, and integrate FIM with ADFS. Is that possible?
OR can we put a domain controller up at the colo site and join it to -their- domain via VPN tunnel, then set up just a FIM server and they have SSO and account control that way?
Any help is greatly appreciated..