0

I am working with Identity and Access Control and I want to use Ws-federation protocol to enable browser based SSO (Single Sign On). I want to know whether this protocol is deprecated due to security reasons or not ?

pnuts
  • 58,317
  • 11
  • 87
  • 139
Utsav
  • 1,593
  • 4
  • 22
  • 46

1 Answers1

1

No, it is not deprecated. Is one of the main protocols implemented in WIF. (The framework you'd use if you are on the Microsoft platform).

Eugenio Pace
  • 14,094
  • 1
  • 34
  • 43
  • Thanks Eugenio for your reply. I am worried about it because some of the open source java api not supporting this protocol. They are only supporting ws-trust. I researched a lot for this but many of them are not supporting ws-federation. Is their any specific reason please share. – Utsav Sep 16 '13 at 06:49
  • From this site i got information please check the column ws-federation [link]http://www.sourceid.org/ [/link]. I am not sure about this please check once and guide me. – Utsav Sep 16 '13 at 07:28
  • 1
    The way I interpret that message is that Ping has deprecated support for ws-federation in their toolkit. Likely because WIF shipped which is supported and maintained by Microsoft. WS-Fed is a Microsoft centric protocol, it is not surprising that the Java world is not overly enthusiastic about it. – Eugenio Pace Sep 16 '13 at 23:23
  • Ping no longer updates that open source toolkit. You can, however, purchase the Ping product, and get all the support you need. – Andrew K. Dec 10 '13 at 14:20