federated-identity

How do I configure WCF to use a custom Realm in URN format with Azure ACS?

ε祈祈猫儿з 提交于 2019-12-07 14:47:14
问题 How do I make my WCF client authenticate using the ACS to my internally hosted WCF service? The issue revolves around setting a custom Realm (which I can't figure out how to set.) My ACS is configured similar to the ACS Samples however the "Realm" is defined as shown below. Excerpt from Azure ACS Configuration page Client Side Code EndpointAddress serviceEndpointAddress = new EndpointAddress( new Uri( "http://localhost:7000/Service/Default.aspx"), EndpointIdentity.CreateDnsIdentity(

Propagate SAML Assertion Response/Security Context to downstream Services/Apps

时间秒杀一切 提交于 2019-12-07 13:46:34
问题 We have multiple services in our environment. There are scenarios where we want the user to auto-login/silently login to one or more participating services without being challenged by the Identity Provider for credentials or communicating with the Identity Provider after the first successful login from one service. For Eg, we have a front-end UI App which we want to be authenticated using Spring Security SAML. And when the UI App communicates to back-end services we want the security context

Web Application - User Authentication Across Domains

↘锁芯ラ 提交于 2019-12-06 13:57:28
问题 A client of ours has approached us to develop an application, and as usual the scope grows day by day. Initially it started as a dedicated app confined within their corporate network. User Authentication was established by aquiring the user's Windows login and using a SQLServer Database to host the access rights. All quite straight forward. They now want the following: - Application to be Web Based - Application to be hosted outside of the corporate network - User authentication to work in

Do I need a custom membership provider to integrate third-party authentication into ASP.NET?

孤人 提交于 2019-12-06 13:20:01
问题 I have an ASP.NET MVC application into which I have just integrated the RPX third-party federated identity system. The integration is working ok, but I'm having some difficulty wrapping my head around what to do with it at the ASP.NET level. I'm pretty new to ASP.NET (I'm learning it with MVC), and I've discovered a little bit about the provider model for membership and profile data, and it seems incredibly complex (but equally powerful). The specific thing I'm struggling with is the

An unsecured or incorrectly secured fault was received from the other party.(When working with SAML )

白昼怎懂夜的黑 提交于 2019-12-06 12:33:45
I'm new to WCF web service. currently i'm working on a federated web service with federation binding(SAML) .I took help of MSDN examples on 'SAML Token Provider'.but the problem is that i'm not able to consume the service ,when i consume it, it throws " An unsecured or incorrectly secured fault was received from the other party" with inner exception as "An error occurred when processing the security tokens in the message." this is my web config file at server side <?xml version="1.0"?> <configuration> <system.web> <compilation debug="true" targetFramework="4.0"/> </system.web> <system

What is the difference between System.IdentityModel & Microsoft.IdentityModel which one should I use?

跟風遠走 提交于 2019-12-06 10:47:13
I just starting out trying to write a federated claims provider I'm using the http://claimsid.codeplex.com/ examples as my template. So I start up VS2010 to begin my own project and the first thing I notice is that there is a System.IdentityModel as well as Microsoft.IdentityModel. This usually happens when stuff gets added to the .Net framework becoming 'mainstream'. Is this the case here? Which one should I use? When using Claims Based authentication/authorization, then you will need to use Microsoft.IdentityModel as that is part of the Windows Identity Framework (WIF). The System

Configuring Ping Federate and Spring SAML to authenticate application

依然范特西╮ 提交于 2019-12-06 09:12:31
问题 I installed PingFederate on an AWS EC2 running Windows_Server-2008-R2_SP1-English-64Bit-Base-2014.04.09. I have a Java application that is using Spring Security for authentication. I have read about how with PingFederate, I can set up an Identity Provider(IdP) and a Service Provider(SP). I have gathered that the IdP would be the Application User providing login credentials(the Identity) and passing this to the SP which has the Target Application apart of the SP in this diagram on this page

Android app + webserver API using Federated login or OpenID (WITHOUT GAE)

╄→尐↘猪︶ㄣ 提交于 2019-12-06 05:47:30
I have an Android app that needs to upload data to an API (API will then save data in MySQL DB). I would like to use a Federated login (Google) or OpenID authentication procedure so that user does not need to register email + password for my app, but rather can use Google (or other account) that is saved in AccountManager . Up until early this year, the solution was using GAE, as per Nick Johnson's famous recipe. But since Google started charging for the use of GAE, this is not a viable solution anymore. PLEASE DO NOT RECOMMEND USE OF GAE . Has anyone ever managed to solve the problem of

How do I configure WCF to use a custom Realm in URN format with Azure ACS?

柔情痞子 提交于 2019-12-05 22:31:29
How do I make my WCF client authenticate using the ACS to my internally hosted WCF service? The issue revolves around setting a custom Realm (which I can't figure out how to set.) My ACS is configured similar to the ACS Samples however the "Realm" is defined as shown below. Excerpt from Azure ACS Configuration page Client Side Code EndpointAddress serviceEndpointAddress = new EndpointAddress( new Uri( "http://localhost:7000/Service/Default.aspx"), EndpointIdentity.CreateDnsIdentity( GetServiceCertificateSubjectName() ), new AddressHeaderCollection() ); ChannelFactory<IStringService>

after federated authentication, redirect to originally requested url

て烟熏妆下的殇ゞ 提交于 2019-12-05 19:12:34
We've setup federated security using ThinkTecture server. When a user wishes to access a particular URL, they get redirected to the Identity Provider Server (IDP), they login, get authenticated. Then, the IDP server will redirect the user back to the "Redirect URL" specified in the configuration for that Relying Party. Instead, I want it to be redirected to the originally requested URL. Is this possible? I've read a little about the wreply parameter, but not sure how I use this and intercept the authentication levels calls on the original web server, before the redirect. Update I've realised