Application level authorizations from within AD FS
(not sure if this made it). I have heard that AD FS can manage application level authorizations, such as a feature within an application to modify an order. I have not seen any examples of that as of yet. If this capability does exist, it would be great to have an example.