Where should I put ADFS at?

Hi everyone,

Hope you can help. I have no experience in installing or setting up adfs..but we just need it now for one project that antoher vendor need to access to our AD. I can find some instructions in how to setup adfs...very easy to follow. But I have some questions:

-Should I put it in DMZ? Or not necessary? 

- If the above is true, which tcp/udp ports I should open on the firewall?

- Shoudl I install in on the same box as the DC is?

- Any other security issue I need to pay attention on?

Hope you can help and share your experience.

Thank you!

Takami