AD- FS Web Agent (PN)~ An installable role service of AD- FS that is used to create an AD- FS-enabled Web server. An AD- FS Web Agent consumes incoming security tokens and authentication cookies that are signed by a valid federation server-€”to either allow or deny a user access to the protected application-€”while taking into consideration application-specific access control settings.