Source: https://go.ncipher.com/rs/104-QOX-775/images/nShield-MS-AD-FS-Server-2016-ig.pdf