Questions tagged [claims-based-identity]

Application model for presenting an identity to a claims aware application. This identity contains claim elements, such as email address or username, in a secure package from a trusted source. This model separates the application from the authentication mechanism.

Resources

Wikipedia Entry - Claims-based identity

MSDN Article - Exploring Claims-Based Identity by Kieth Brown

1595 questions
0
votes
1 answer

Sharepoint zone authentication doesn't work

I have a Sharepoint 2010 web application using claims based authentication. It contains three zones (two extensions). The first, main zone works fine. The second (intranet) asks for the credentials but doesn't authenticate. The third (extranet,…
0
votes
1 answer

Connecting IdSrv to LDAP

I've seen samples that connect an on premises IdSrv instance to ADFS, but I can't find one that connects to a LDAP IP (AD, not ADFS). Is there a sample or documentation somewhere on this? Thanks.
0
votes
1 answer

Who have to validate STS security token lifetime

We have a custom active STS based on WIF. It normally issues standard security tokens by client requests. In the STS Service configuration we has been set DefaultTokenLifetime parameter to 1 min. After that we are calling our server with applied…
0
votes
1 answer

Implementing my own idP/STS to work with asp.net claims based authetication

I have just watched the following video on Claims based authentication, I would like to implement this in a few of our companies applications, However all the examples talk about Using Windows Azure Active Directory as an Identity Provider. I would…
Zapnologica
  • 22,170
  • 44
  • 158
  • 253
0
votes
0 answers

Where to put redirect-code in MVC application using claims-based authentication

I have setup ADFS to return the following claim: UseragreementAccepted: true/false When I reach my MVC-application I want to inspect this claim, and if value==false I want to redirect the user to a completely different web-application where the user…
Thomas
  • 355
  • 1
  • 4
  • 17
0
votes
1 answer

Cookie-less temporary authentication in ASP.NET MVC

At the moment I'm working with ASP.NET MVC 5 and the new Identity 2 framework for authentication and authorization. Based on these principals I implemented a custom claim-based system which is able to check if a user action is permitted by passing…
0
votes
2 answers

Claims-based auth in a SaaS app with Users many-2-many to Tenants

I'm building a multi-tenant SaaS system where a user in the system is an entity independent of a Tenant entity. IE: Customer 1 can have users User1, User2 associated with it with certain roles and Customer 2 can have User2 and User3 associated with…
0
votes
1 answer

Accessing a ClaimsPrincipal in a WCF ParameterInspector

I am using WIF to secure my WCF service with claims-based security. I would like to implement some simple attributes that can decorate service methods to specify the claims required for a particular operation. I've started by implementing an…
mclark1129
  • 7,532
  • 5
  • 48
  • 84
0
votes
1 answer

Is it possible in ASP.Net Web API 2 to have different OWIN UserManager for root and a area?

We currently have OWIN setup to authenticate our Web APIs that are at the root site. These are used by normal users. We are now in need of the ability to call similar functionality, but as a admin. We thought about creating a Area such as "Admin"…
John C
  • 1,761
  • 2
  • 20
  • 30
0
votes
1 answer

Receive Response from Custom STS

I worked this http://chris.59north.com/post/2013/04/09/Building-a-simple-custom-STS-using-VS2012-ASPNET-MVC.aspx custom STS with windows foundation identity claims out. If I understood correct the Identiy Access tool adds to the web.conf the…
Briefkasten
  • 1,964
  • 2
  • 25
  • 53
0
votes
1 answer

Can't access custom claim

I am adding custom claim to the User.Identity for a web site using MVC5 and OWIN authentication. But I'm using local account sign in. AuthenticationManager.SignOut(DefaultAuthenticationTypes.ExternalCookie); …
Randeep Singh
  • 998
  • 2
  • 11
  • 31
0
votes
0 answers

Using Forms Auth. with Claims Based Auth

Using this guide I've implemented claims based auth on ASP.NET Webforms successfully. But the problem is while using claims based auth. you cannot use forms based auth in the same app pool:
Kaan
  • 902
  • 2
  • 16
  • 38
0
votes
1 answer

How can ADFS be used with virtual directories in IIS?

I have IIS 7.5 installed. How can I configure a virtual directory so that it authenticates users against an instance of AD FS 2.0? I've tried modifying my web.config in a similar fashion to the way I modified it to work with C# web applications, but…
Nicholas Hill
  • 306
  • 2
  • 18
0
votes
1 answer

Is Claim-based authentication abused?

I'm ASP.NET MVC programmer and have researched to adopt Claim-based authentication to my project. It seems that claim-based authentication try to give various kind of information along with token, but I would like to ask its usage scope. As we can…
Youngjae
  • 24,352
  • 18
  • 113
  • 198
0
votes
1 answer

WIF 4.0 issue with deployment on load balanced environment

I am using WIF 4.0 to build a claims aware RP and STS. I am having issues now that I have deployed to my production environment with multiple servers hosting the application. For some reason I get the dreaded [CryptographicException: Key not valid…
shenn
  • 859
  • 4
  • 17
  • 47