An STS that uses AD to authenticate and a database to provide authorization data.