This document describes the integration of Microsoft Active Directory Federation Services (AD FS) with nCipher nShield hardware security modules (HSMs). The integration provides increased robustness and control by securely managing high value Transport Layer Security (TLS) and Token keys required by AD FS within a fully FIPS 140-2 Level 3 approved hardware environment.