0

In our current project we develop an ASP.net MVC application hosted in an docker (Docker Desktop for Windows) container using the windows server core image (https://hub.docker.com/r/microsoft/windowsservercore/). Everything is working well but now we would like to use the Windows Identify Foundation (WIF) for authentication with an ADFS.

Unfortunately, the Windows Server Core image for docker does not support the WIF feature and it cannot be installed.

Does someone have an idea how to use the WIF inside of a docker container and/or experience with installing the feature in this image?

Is their an alternative image with the feature enabled?

Similar topics without docker such as:

  1. https://support.microsoft.com/en-us/help/3044149/you-can-t-install-windows-identity-foundation-in-windows-core
  2. https://blogs.technet.microsoft.com/server_core/2012/05/09/configuring-the-minimal-server-interface/

Did not help.

Community
  • 1
  • 1
mugbi
  • 86
  • 4

2 Answers2

2

I know this is an old question, but I recently ran into the same problem and wanted to share the resolution I was able to come up with. In my case, I was working with a legacy software solution that referenced "Microsoft.IdentityModel.dll" (installed by WIF), and it was not as easy to just switch it out to something else.

I installed WIF on my laptop (Windows 10) and then added the file to my docker image

C:\Program Files\Reference Assemblies\Microsoft\Windows Identity Foundation\v3.5\Microsoft.IdentityModel.dll

Then, add a PowerShell script to your DOCKERFILE to install that assembly into the GAC manually. Here's a good blog post showing how to do that as well:

https://www.andrewcbancroft.com/2015/12/16/using-powershell-to-install-a-dll-into-the-gac/

Hope it helps!

Justin Carlson
  • 21
  • 2
0

We could solve our problems with OWIN.

Bas Lijten posted a nice tutorial on this: http://blog.baslijten.com/configure-claims-based-web-applications-using-owin-wsfederation-middleware/

We configured the usage of WS-Fed with Owin but did not use an Embedded STS. Instead we created a standalone identityserver instance to test the ADFS integration. On GitHub you can find an example for such an identity server configuration:

https://github.com/IdentityServer/IdentityServer3.Samples/tree/master/source/SelfHost%20(InMem%20with%20WS-Fed)

mugbi
  • 86
  • 4