Questions tagged [claims-based-identity]

Application model for presenting an identity to a claims aware application. This identity contains claim elements, such as email address or username, in a secure package from a trusted source. This model separates the application from the authentication mechanism.

Resources

Wikipedia Entry - Claims-based identity

MSDN Article - Exploring Claims-Based Identity by Kieth Brown

1595 questions
0
votes
2 answers

Recommended Pattern for Identity Federation

I am going to talk in terms of SAML but I'm not fussed about the protocols. There will be a Federation Provider (FP) that trusts a number of external and 1 internal Identity Providers (IdP). The applications (SP) will in turn trust the FP. The SPs…
Peter Kelley
  • 2,350
  • 8
  • 26
  • 46
0
votes
2 answers

ASP.NET MVC 5 Pass/Get more user data to the whole application

I've added a few new columns to User model which inherited from IdentityUser: public class ApplicationUser : IdentityUser { public int Age { get; set; } public bool Sex { get; set; } public async Task
user547202
0
votes
2 answers

Azure Virtual Machines not holding Logged in User Session

I am developing a MVC4 application . We have hosted our application on Windows Azure IAAS Model . Right now we have configured 2 virtual machines and everything is working good. But we have an issue with maintaining User Loging . If i login in…
0
votes
0 answers

Claims-based authorization in MVC 5 using Google OAuth2

Having implemented Google OAuth2 via OWIN, I have a question about Claims in general. We need a ton of Claims, in order to set up Claims-Based Authorization. Note that this is NOT about Claims-based Authentication. Google only supplies a few Claims,…
0
votes
1 answer

Sliding Expiration in ASP.NET web app using claims from STS

Two questions: 1) How/where do I set the lifetime of the session cookie in my web application when using an STS to get claims? From what I can tell, it seems I can only do this programmatically in the ServiceConfigurationCreated event. 2) How/where…
StsDude
  • 3
  • 3
0
votes
1 answer

Claims-based Authentication: Are strings the essence of claims?

I've been programming with claims-based authentication for some time now with Windows Identity Foundation. It appears to me that in Windows Identity Foundation, once a user is logged in, the claims are basically strings of information that describe…
Vivian River
  • 31,198
  • 62
  • 198
  • 313
0
votes
1 answer

Read authentication info (Principal) by developing a .Net Web Service

I am dealing with a Claim-based application, with the aim to display users info after their authentication through SSO. For a given authenticated user, I realized a .Net Web Page wherein I show all claims starting from the provided Principal…
vdenotaris
  • 13,297
  • 26
  • 81
  • 132
0
votes
2 answers

ASP.NET Identity and Claim-based

How to use claims? For example, I want to set access to each page (resource) for each user. I understand, I can do it using roles, but as I understand, claim-based is more effectively. But when I try to create a claim, I see the following method: …
Oleg Sh
  • 8,496
  • 17
  • 89
  • 159
0
votes
1 answer

SignOut of claims authentication

I have successfully implemented claims authentication in to my project. As shown here: var userCredentials = new[] { new Claim("UserId", userProfile.UserId.ToString()), new Claim("Username", userProfile.UserName)}; …
0
votes
0 answers

ASP.NET Identity Entity Framework for multiple applications

the new db schema does not contain a table for storing applications and associating claims along with it. so is the recommended practiced to have a claim type 'Application' where a user can have zero or more records? What about permissions?…
0
votes
1 answer

Can IdentityServer return claims as part of authenticate request

I am implementing wsfed authentication using wsfederation plugin on top of Thinktecture IdentityServer, I got my own UserService implemented with AuthenticateLocalAsync method as below public async Task
Ming
  • 730
  • 2
  • 8
  • 23
0
votes
1 answer

Is my understanding of Claims-based identity and its difference with OAuth correct?

After reading about Microsoft's Claims-based identity, I don't understand what it brings more compared to OAuth (and therefore where is it better to use Claims-based identity rather than OAuth). According to this Stack Overflow answer: Claims-based…
Arseni Mourzenko
  • 50,338
  • 35
  • 112
  • 199
0
votes
0 answers

ClaimsAuthorizationManager database configuration

I followed the MSDN post on implementing a claim-based authorization. https://msdn.microsoft.com/en-us/library/system.security.claims.claimsauthorizationmanager(v=vs.110).aspx It uses XML configuration in Web.config to define policies. Can the…
0
votes
3 answers

Update a value stored in Claims(System.Security.Claims)

I have applied the authentication using the claims based indentity var identity = new ClaimsIdentity(new[] { new Claim(ClaimTypes.Name, userContext.ReturnObject.UserName), new…
0
votes
1 answer

Migrate System.Security/IdentityModel to OWIN/Katana Approach

I want to migrate my security infrastructure to OWIN/Katana but i'm not very familiar with it. I hope someone can give me a ride in the right direction. Currently i use .net fwk 4.5, mvc 5 and the features in System.Security/IdentityModel. The…