federated-identity | 易学教程

Windows Azure Multi Tenancy

阅读更多关于 Windows Azure Multi Tenancy

问题 I am starting a new enterprise web application. It will be hosted up on Windows Azure and will be an asp.net MVC application talking to an SQL database. My question relates to multi-tenancy and the correct way to accomplish it. In the past I've created a multi-tenant application by having a tenant table and than putting a TenantID column in every table. This worked fine (but it was only on a smaller scale so it didn't really exercise it to the nth degree). Looking into the multi-tenant stuff

An unsecured or incorrectly secured fault was received from the other party.(When working with SAML )

阅读更多关于 An unsecured or incorrectly secured fault was received from the other party.(When working with SAML )

问题 I'm new to WCF web service. currently i'm working on a federated web service with federation binding(SAML) .I took help of MSDN examples on 'SAML Token Provider'.but the problem is that i'm not able to consume the service ,when i consume it, it throws " An unsecured or incorrectly secured fault was received from the other party" with inner exception as "An error occurred when processing the security tokens in the message." this is my web config file at server side <?xml version="1.0"?>

Android app + webserver API using Federated login or OpenID (WITHOUT GAE)

阅读更多关于 Android app + webserver API using Federated login or OpenID (WITHOUT GAE)

问题 I have an Android app that needs to upload data to an API (API will then save data in MySQL DB). I would like to use a Federated login (Google) or OpenID authentication procedure so that user does not need to register email + password for my app, but rather can use Google (or other account) that is saved in AccountManager . Up until early this year, the solution was using GAE, as per Nick Johnson's famous recipe. But since Google started charging for the use of GAE, this is not a viable

after federated authentication, redirect to originally requested url

阅读更多关于 after federated authentication, redirect to originally requested url

问题 We've setup federated security using ThinkTecture server. When a user wishes to access a particular URL, they get redirected to the Identity Provider Server (IDP), they login, get authenticated. Then, the IDP server will redirect the user back to the "Redirect URL" specified in the configuration for that Relying Party. Instead, I want it to be redirected to the originally requested URL. Is this possible? I've read a little about the wreply parameter, but not sure how I use this and intercept

How do I move federationConfiguration out of web.config and to some custom config file and load it dynamically by code

阅读更多关于 How do I move federationConfiguration out of web.config and to some custom config file and load it dynamically by code

问题 I have my configuration in web.config and it works fine. <configuration> <system.identityModel.services> <federationConfiguration> .... </federationConfiguration> </system.identityModel.services> </configuration> How do I move this out of web.config to a custom config file and load it from code? I want to use the same structure of this configuration so that I do not have to change anything in code if I have to change this configuration file. 回答1: You can tap into the WIF event from your

SQL Azure Integrated Authentication with a cloud-only Azure Active Directory fails

阅读更多关于 SQL Azure Integrated Authentication with a cloud-only Azure Active Directory fails

问题 I have created an Azure tenancy and configured the following: Azure AD with: A simple custom domain name (less than 15 characters). DNS verified etc. All good. Users and Admins groups Users in both groups A VNET and DNS and IP Addresses Enabled Device Management Enabled Domain Services and connected to the VNET Note that there is nothing on premise, this is all in the cloud. My physical laptop is effectively being used just as a jump box. A SQL Azure database and server with: Firewall rules

WIF- ID1014: The signature is not valid. The data may have been tampered with

阅读更多关于 WIF- ID1014: The signature is not valid. The data may have been tampered with

问题 I've been using WIF to authenticate our new website, the STS is based upon the starter-sts implementation. To enable this to work correctly on out load balanced environment I've used the following in the global.asax to override the default certificate behaviour. void onServiceConfigurationCreated(object sender, ServiceConfigurationCreatedEventArgs e) { List<CookieTransform> sessionTransforms = new List<CookieTransform>(new CookieTransform[] { new DeflateCookieTransform(), new

SAML assertion with username/password - what do the messages really look like?

阅读更多关于 SAML assertion with username/password - what do the messages really look like?

问题 I need to create a some SAML 2.0 assertions, and I'm having trouble finding what the XML should really look like. Most of the documentation seems to be about using particular tools, not about the messages. I've got the schemas, with a plethora of possibilities, but I can't find an example of what the relevant messages actually look like in practice. The business rule says: in order to create a shared identity, the user tells system A their username and password on system B. System A needs to

Keycloak and spring boot rest api - user specific data stragegy

阅读更多关于 Keycloak and spring boot rest api - user specific data stragegy

问题 Keycloak is a user federated identity solution running seperately (standalone) from other systems referencing to it (for authorization for example) having its own database. Question: How would I reference / create user specific data in my rest api database? How would I reference the user in the rest api database to have user specific data? Think of an table like Post title, date, content, author (here would be the reference to the user) 回答1: We have a similar requirement in a Java EE

Keycloak and spring boot rest api - user specific data stragegy

阅读更多关于 Keycloak and spring boot rest api - user specific data stragegy

Keycloak is a user federated identity solution running seperately (standalone) from other systems referencing to it (for authorization for example) having its own database. Question: How would I reference / create user specific data in my rest api database? How would I reference the user in the rest api database to have user specific data? Think of an table like Post title, date, content, author (here would be the reference to the user) We have a similar requirement in a Java EE application, where a user can create data via a JSF website. Data is stored to postrgesql with audit information