Questions tagged [federated-identity]

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

528 questions
3
votes
1 answer

Using Identity and Access Management with Java

I am working with Java application and i want to implement Single Sign on and Federation in my Java Application. I want to implement Claims Aware application in Java.How to achieve that.
Utsav
  • 1,593
  • 4
  • 22
  • 46
3
votes
0 answers

Not authorized for requested resource when already logged in to Identity server

I have Identity server running locally with self signed SSL certificate, and RP that doesn't use HTTPS, when I try logging in for the first time(without being already logged in on IdentityServer) everything goes fine, I get authorized and redirected…
formatc
  • 4,261
  • 7
  • 43
  • 81
3
votes
2 answers

after federated authentication, redirect to originally requested url

We've setup federated security using ThinkTecture server. When a user wishes to access a particular URL, they get redirected to the Identity Provider Server (IDP), they login, get authenticated. Then, the IDP server will redirect the user back to…
3
votes
1 answer

Federated security using Thinktecture IdentityServer

I have few mvc applications that are still in development and use Forms with SimpleMembership to register and authenticate users, these applications use same database and I have foreign keys all around to UserProfile table from simple…
3
votes
1 answer

Do identity providers (Microsoft, Facebook, Twitter and Google) provide email addresses to web sites that use them for authentication?

I am writing a mobile website that will be hosted in Windows Azure. I already have a list of users with email addresses in my database and I am looking at how they will log in to my new website. This is a new service for existing users, they do not…
Derek Tomes
  • 3,989
  • 3
  • 27
  • 41
3
votes
1 answer

Why does this WCF call fail when passing in a federated security token

I'm trying to pass a security token from a client application into a WCF service for authentication. For this example I'm just using the standard File, New WCF Application project and trying to call the GetData method. I get the following…
Gavin
  • 17,053
  • 19
  • 64
  • 110
2
votes
1 answer

Securing an HTTP API - No user password prompt and avoiding exposing the private key

I'm working on API exposed over HTTP that will be consumed by partner companies and deployed to their numerous clients. In some cases the client will be browser based. This is my major focus but I could potentially apply the same pattern where the…
tidmutt
  • 143
  • 1
  • 9
2
votes
1 answer

Do I need Federation Authentication if I have a custom STS? If so, why?

If I have a custom Secure Token Service that specifically lists out allowed audiences and checks if the token is coming from one of of those audiences and also checks the thumbprint and issuer of the X509 certificate, do I need WSFederation? Since…
2
votes
1 answer

What is the difference between System.IdentityModel & Microsoft.IdentityModel which one should I use?

I just starting out trying to write a federated claims provider I'm using the http://claimsid.codeplex.com/ examples as my template. So I start up VS2010 to begin my own project and the first thing I notice is that there is a System.IdentityModel as…
Peter
  • 7,792
  • 9
  • 63
  • 94
2
votes
1 answer

How to set up simplesamlphp to use ADFS 2 as idp

I'm trying to get simplesamlphp 1.8 to use ADFS 2 as IdP. Now I'm seriously stuck when getting browser NTLM authentication dialog, which does not accept any login (after selecting "Test authentication sources" -> "default-sp"). In…
borobax
  • 41
  • 1
  • 8
2
votes
1 answer

Okta federated Azure AD user login question

Azure/Intune newbie here. We are planning to implement Intune in our org, and I have a question regarding user device log-in to Windows devices if Azure AD is Okta federated. From the log-in/lock screen, do users use their Okta credentials to log in…
2
votes
0 answers

Identity Broker vs. Federation Gateway

I am trying to understand differences between Identity Broker and Federation Gateway and where and when should you use these two services. Thanks for all kind of advice.
2
votes
1 answer

Access specific folder in GCS bucket according to user, using Workload Identity Federation

I have an external identity provider that supports OpenID Connect (OIDC) and want to access Google Cloud Storage(GCS) directly, using a short-lived access token. So I'm using workload identity federation in order to provide a credential from my…
2
votes
1 answer

WCF FederatedAuthentication session state messes with ClaimsAuthorizationManager

Context: There are a few threads here on Stack and on Bing that talk about WCF and session sharing with ASP.NET. None satisfy my issue fully. So here goes: I have an MVC site which also has a few services in the RouteTable under the path…
noopman
  • 660
  • 1
  • 4
  • 15
2
votes
0 answers

Using Access Token to get Authorization Code between two identity providers in a federation

I can't seem to find a standard solution for this, so I'm asking for your opinion. I'll list the moving parts, first: Identity Provider 1 (IP1) Resource Server 1 (RS1) - resources accessed with accounts from IP1 Identity Provider 2 (IP2) - acts as…
Mit_
  • 149
  • 1
  • 11