How to validate token, in ASP.NET Web API 2, which is provided by new OAuth 2 end point of ADFS that is part of Windows Server 2012?

Question

Recently, MS have spoken in build 2013 conference session titled "Securing Windows Store Applications and REST Services with Active Directory" and video posted at http://channel9.msdn.com/Events/Build/2013/3-518

This session talks about new OAuth end point as part of ADFS Windows Server 2012 server. And token validation in ASP.NET Web API using AAL and for this Windows Azure Active Directory is required.

But I would like to try on premise ADFS of Server 2012.

Which lib should I use with in MS framework to validate the token in ASP.NET Web API 2?

Note this is only available in ADFS Windows Server 2012 R2. – rbrayb Jul 09 '13 at 19:42 — rbrayb, Jul 09 '13 at 19:42

score 2 · Answer 1 · answered Jul 09 '13 at 18:03

2

What is the token format you plan to use? Will it be the SAML as-is or you plan to transform it to may be JWT? Azure ACS can give you JWT or you can use thinktecture identity server. Check this out. SAML can get bulky at times and you can have problem transporting them in an HTTP header depending on the token size.

If you plan to use SAML, you can use WIF classes SecurityTokenHandlerCollection, etc. For JWT, there is a library available with a long name of "JSON Web Token Handler For the Microsoft .Net Framework 4.5". Check this out as well.

answered Jul 09 '13 at 18:03

Badrinarayanan Lakshmiraghavan

19,159
4
62
61

Thanks Badri. But I am not looking for using thinktecture identity server and I am not sure whether ADFS gives JWT. I will check this. – Suresh Balla Jul 09 '13 at 18:10
ADFS does not give you JWT. – Badrinarayanan Lakshmiraghavan Jul 09 '13 at 18:14
Yes, it can: http://blogs.technet.com/b/maheshu/archive/2015/05/26/json-web-token-jwt-support-in-adfs.aspx – RobS Nov 26 '15 at 22:51
Take a look at this article I recently wrote, it might provide some assistance? http://sanderstechnology.com/2015/securing-a-web-api-with-adfs-3-0-and-jwt-tokens/14297/ – RobS Nov 30 '15 at 14:30

How to validate token, in ASP.NET Web API 2, which is provided by new OAuth 2 end point of ADFS that is part of Windows Server 2012?

1 Answers1