Directory Programming .NET

OK, so ISA provides single sign on, but doesn't do federation.  ADFS does sso and federation.  IAG can potentially mix ISA and ADFS, is there a reason you would want to?

If ISA is doing some sso currently in one "realm" do we just scrap the authentication of ISA and replace it with ADFS, or do we keep ISA as a middle man and get ADFS to authenticate to ISA which then authenticates to the resources?

No one seems to know anything, and on the news groups all I heard was, "use IAG"

any ideas?

Based on what I Jim mentioned in another thread, it sounds like IAG provides the same function as the FSP, so if you had IAG you wouldn't need a separate FSP box.  Otherwise I don't have anything else useful to tell you beyond what I said last week (which wasn't much). 

I will look into it and try to report anything useful.