On the Forefront UAG server, click Start, point to Administrative Tools, and then click Server Manager.

Right-click Roles, and then click Add Roles to start the Add Roles Wizard.

On the Before You Begin page, click Next.

On the Select Server Roles page, click Active Directory Federation Services. Click Next twice.

On the Select Role Services page, select the Windows Token-based Agent check box and then click Next.

On the Specify Federation Server page, type the URL of the Federation Server, and then click Next. Do not click Validate.

After verifying the information on the Confirm Installation Selections page, click Install.

On the Installation Results page, verify that everything installed correctly, and then click Close.

Make sure that the AD FS web agent can communicate with the AD FS server.

1. On the Forefront UAG server, click Start, and then in the Start Search box, type inetmgr and press ENTER.
   
   
2. In the Internet Information Services (IIS) Manager, in the navigation tree, click the server name.
   
   
3. In the center pane, in the Other section, double-click Federation Service URL.
   
   
4. Copy the URL and access it from a Web browser.
   
   

   Note:
   You must be able to access the URL from a Web browser for Forefront UAG to work with AD FS.