I am working to move an ASP.NET MVC site currently using FormsAuthentication to use SSO (Webgate/OAM).
The Webgate is installed and exposed thru an ISAPI filter on IIS and redirects to SSO page.
In FormsAuthentication, we would get HttpContext.Current.User as IPrincipal. But with SSO authentication, IPrincipal in HttpContext.Current.User is no over available.
This documentation from Oracle says that protected ASP.Net should expect WindowsPrincipal as its IPrincipal. But replacing HttpContext.Current.User with WindowsPrincipal is not helping either.
Is there a way I can capture the identity of authenticated user inside ASP.NET application?