Now that we have most of our services reliant on SSO and ADFS, I'd like to strengthen it a bit. Currently, we are setup in this fashion: fs1.company.com -> [FEDERATION PROXY] -> [ADFS SERVER (ALSO DC) ...