1

Is it possible to create a User in Thinktecture IdentityServer that can only be authenticated by a certificate? The default IdentityServer UI seems to indicate that a User needs a Username/Password credential which you then associate with a certificate - but I'd like to have one for which the password is irrelevant and can only be authenticated by the certificate.

Clint
  • 1,159
  • 1
  • 10
  • 19

1 Answers1

1

No - the way it works right now is that the cert thumbprint is basically a pointer to an existing account. You can of course create a very long random password for that account.

leastprivilege
  • 18,196
  • 1
  • 34
  • 50
  • Thanks very much for the response - I'm having some trouble applying this in a WsTrustChannel scenario to obtain a token though as I've detailed in this question: http://stackoverflow.com/questions/22138715/how-to-specify-a-certificate-as-the-credentials-for-a-wstrustchannel-with-thinkt – Clint Mar 03 '14 at 04:34