Questions tagged [claims-based-identity]

Application model for presenting an identity to a claims aware application. This identity contains claim elements, such as email address or username, in a secure package from a trusted source. This model separates the application from the authentication mechanism.

Resources

Wikipedia Entry - Claims-based identity

MSDN Article - Exploring Claims-Based Identity by Kieth Brown

1595 questions
0
votes
1 answer

Azure WAAD/WIF C# / REST

I need to authenticate users with WS-Fed/SSO. But how can I get user roles from f.e. SAP to authenticate them with WIF and use defined roles? Is there something like C#/REST Api available? Or how to connect the ID-Prov. with 3rd party SAP system? Or…
x4k3p
  • 1,598
  • 2
  • 22
  • 42
0
votes
1 answer

Web Api - claims based auth via STS

I am building two seperate ASP.Net WebApi applications, which will run under the same domain (not subdomain) plus one STS that handles the authentification and will be the user account store. The client connects with breeze.js/angular.js to that…
0
votes
1 answer

SPClaimsAuthRoleProvider.GetUsersInRole(string roleName) encountered a role '0(.s|true' with unsupported original issuer type 'SecurityTokenService'

Getting the following error message in the SharePoint 2010 ULS Logs when some custom code attempts to invoke SPUtility.GetPrincipalsInGroup(): SPClaimsAuthRoleProvider.GetUsersInRole(string roleName) encountered a role '0(.s|true' with unsupported…
0
votes
0 answers

How to Claims Enable a Windows Service

The majority of samples I find regarding claims based security focus on a WCF or Web Application or perhaps OWIN or self-hosted Web API. Assume the federation server is ADFS 2; how would a .Net application in the form of a Windows service…
Richard
  • 603
  • 5
  • 14
0
votes
3 answers

Which Technology Stack Should I Use for Claims-Aware Applications

This is a second attempt with better wording of the problem I'm facing. I have a simple requirement to implement an application that will allow web applications and standalone services that will be claims-aware (using ADFS). Note that I am talking…
Richard
  • 603
  • 5
  • 14
0
votes
2 answers

Thinktecture Identity Server - setup external identity providers

I'm following Brock's tutorial on OAuth2 identity providers: OAuth2 in Thinktecture IdentityServer : OAuth2 identity providers and I'm having problems trying to setup each provider details. I'm trying to use google and facebook. Google: What I've…
0
votes
1 answer

How to implement Federated Authentication for server processes communicating with each other

I'm currently using Thinktecture's Identity Server as a security token service to handle the issuing of tokens based on username and password claims. This fits perfectly for a scenario where the authenticating client is an actual user…
0
votes
2 answers

WIF - managing domain specific authorization

I have a Windows Identity Foundation based infrastructure with a Custom STS with its own database. The STS authenticates users. The database also contains various Authorisation related claims about users. We add these claims after the user has…
jonho
  • 1,680
  • 2
  • 19
  • 29
0
votes
1 answer

Unable to decrypt claims cookie from .NET 4.5 to .NET 3.5

I have been trying to get the following scenario to work for around a week now with no luck. I have 2 applications, a .NET 4.5 application that is claims enabled, which is working perfectly well (works with other .NET 4 and up applications); and a…
user2760821
  • 109
  • 4
0
votes
0 answers

Different browser behavoiur with claims when page is refreshed

We have an MVC/AngularJS system with a Web API back-end that uses Azure ACS and AAD to authenticate our users. The authentication works well, and when the user first authenticates the claims from ACS are passed in in the token. We override the…
Neil
  • 2,659
  • 7
  • 35
  • 57
0
votes
0 answers

Can I use ASP.Net Identity twice in my MVC application?

I'm developing an MVC 5 web application with an existing database. The application really has two types of interfaces, one set for registered users only, the other set for admin users only. Unfortunately both types of users are not stored in the…
tcode
  • 5,055
  • 19
  • 65
  • 124
0
votes
1 answer

STS logging user out after 60 mins, how to extend?

I have setup a Relying Party, SharePoint site and a Claims application. My application's are talking to each other and the SSO is working with SharePoint. My only issue now is that after about an hour, the user is logged out of the application and…
shenn
  • 859
  • 4
  • 17
  • 47
0
votes
2 answers

ADFS configuration: Can I configure ADFS to serve a claim containing URL to a user's profile picture?

I am building a SAAS application which needs to have SSO with a client's ADFS server. Is it possible to get a URL to a user's AD profile picture to show up as a claim in the SAML token, so I can display it in my app?
skb
  • 30,624
  • 33
  • 94
  • 146
0
votes
1 answer

ASP.NET Identity Claims and Logins

I'm trying to understand new Identity auth. Could anyone tell me, why should i use UserClaims and UserLogins? (i don't use any external auth). Where should i use it? How to sign in without claims? Currently i'm signing in with claims: var identity =…
0
votes
1 answer

Implementing Federated security using Thinktecture IdentityServer v2

Infrastructure layout BLUE lines initiate the request to login. RED lines is the response after successful login. I hit a 404 going from idp(janie-pc/ofsidentityservice) to fp(janie-pc/federationservice). Configuration What do I need to do to get…
1 2 3
99
100