开发者

How to federate SelfSTS with ADFS v2.0

开发者 https://www.devze.com 2023-02-15 10:09 出处:网络
Has anyone successfully managed to do this? SelfSTS is a WCF application not a ASP.NET one and there don\'t seem 开发者_开发问答to be many examples or code samples for doing WCF integration?

Has anyone successfully managed to do this?

SelfSTS is a WCF application not a ASP.NET one and there don't seem 开发者_开发问答to be many examples or code samples for doing WCF integration?

It would be really useful because SelfSTS allows you to dynamically create combinations of claims which is really useful for unit testing.

Update:

Here's the problem:

The Federation metadata provided by SelfSTS is a http URL not https so you have to save the xml to a file. If you input the http URL to ADFS when adding a Claims Provider trust, it will throw an error stating that it will only accept https.

When you import data from a file, ADFS complains that some of the federation metadata was skipped because it is not supported by ADFS.

I then add pass through rules for Name and Email.

SelfSTS now appears in the list of Claims Providers.

However, when I view the properties, it does not have an endpoint. All my other STS in the list have an endpoint of WS-Federation Passive. (None of these are WCF). I would have expected SelfSTS to have an endpoint of WS-Trust?

If I then connect to an application configured as a RP in my ADFS, the Home Realm Discovery dropdown contains entries for all my passive Claims Providers but there is no entry for SelfSTS?


I have no idea about SelfSTS. But it may help you to create custom STS and register it standard way in ADFS as Claim Provider Trust. There you can also define what claims you want to return in code.

References: http://code.msdn.microsoft.com/Custom-Token-ddce2f55
http://edo-van-asseldonk.blogspot.cz/2011/10/add-custom-sts-to-adfs.html
http://chris.59north.com/post/2013/04/09/Building-a-simple-custom-STS-using-VS2012-ASPNET-MVC.aspx

0

精彩评论

暂无评论...
验证码 换一张
取 消