Questions tagged [sts-securitytokenservice]

Security Token Service. A web service where a user (or client software) presents some form of credentials (e.g., username/password), and if valid the result is a 'security token' that can be used to access a web application or web service. Often used for implementing single sign-on (SSO).

Security Token Service: A web service where a user (or client software) presents some form of credentials (e.g., username/password), and if valid the result is a 'security token' that can be used to access a web application or web service. Often used for implementing single sign-on (SSO).

167 questions
2
votes
1 answer

Custom Security Token Service - Implementation

I'm working on an MVC 4 project. Actually the project involves 3 modules which talk to each other. User can buy licence to any of the 3 modules or all of it. I need to implement a single sign-on for the website that we are creating. So we decided to…
2
votes
0 answers

How to build Security Token Service (STS) in python

I am new to python development and still learning it so my question can be little naive please bear with it :) Is it possible to build Security Token Service (STS) using python following wsdk and soap ? if yes how ? I have checked here STS using…
Harshawardhan
  • 1,521
  • 1
  • 24
  • 29
2
votes
1 answer

Build Security Token Service (STS) application for ASP.NET website

I have a ASP.NET based CMS which i use to setup websites. This CMS uses a standard ASP.NET membership mechanism, and it can work with claims based / STS authentication. Now i want to setup a set of 4 websites and a login page/portal that sits in…
Tys
  • 3,592
  • 9
  • 49
  • 71
2
votes
1 answer

How do I use X509SecurityToken as an ActAs token and verify that the caller has the private key?

I have implemented an STS that allows clients to authenticate using X509 certificates. WIF (now built in in .NET 4.5) has an X509SecurityToken class that seems to work perfectly for this scenario. In my case, I would also like to pass an ActAs…
Mark
  • 11,257
  • 11
  • 61
  • 97
2
votes
1 answer

Stuck in a Authentication redirect loop - STS/WIF

Using VS2012 .Net Framework 4.5, I created a WCF Service Application with Local STS, using Identity and Access Plugin. My goal is to be able to authenticate using the browser. What I did so far: Added WSFAM and SAM modules. Used Fiddler to make…
2
votes
1 answer

WCF service and Thinktecture Identity server

im using the thinktecture identityserver Security Token Service im trying to set up a scenario where I have a client using a WCF service. I'm stuck at a point where I get next error: MessageSecurityException An unsecured or incorrectly secured fault…
2
votes
1 answer

How to avoid ADFS sign in page?

Is there any chance to avoid ADFS sign in window shown in picture below? I have configured custom STS as claim provider trust on ADFS so I have now two options here. Is there a way to automatically set default value here and skip this page?
lazarus
  • 1,997
  • 3
  • 26
  • 44
2
votes
0 answers

SP2010: STS: 'SecurityTokenServiceApplicationPool' - autostart error

I am unable to create a web application from central administration Need to get FBA site working If I try to run SecurityTokenServiceApplication/securitytoken.svc following error is displayed. An ExceptionDetail, likely created by…
user1897709
  • 21
  • 1
  • 3
2
votes
0 answers

Spring mvc web app with spring security login - how to pass credentials to cxf STS client for service integration?

I have a web app that uses spring security to log in. I am trying to integrate a backed service using cxf which uses STSClient. Is there a reference implementation for integrating the two? I've tried creating my own authentication provider that will…
2
votes
1 answer

Consuming WCF webservice using STS authentication token

I am looking for something that I haven't been able to find out as yet.. Can you please tell me that if there's a way that I can use, the token returned by the STS, with a claims aware WCF webservice. Like for now I am trying to do it I am able to…
2
votes
1 answer

Examples of how to a STS in .Net 4.5 using WCF

I'm looking for Examples of how to a STS in .Net 4.5 using WCF. So the scenario is I have a MVC 4 web app that I want to write an STS to authenticate and get claims that stores its data in the traditional SqlMembershipProvider database schema that…
Peter
  • 7,792
  • 9
  • 63
  • 94
2
votes
1 answer

Can SAML tokens be used to exchange symmetric keys?

I would like the client connect to an STS to obtain a SAML token and use it to authenticate it self to a service, but I want the token to contain more information than the standard SAML token, I would also like to avoid using transport level…
2
votes
1 answer

SslNegotiateCert Web.Config Error with Thinktecture.IdentityServer .NET 4.5

I am using the Thinktecture.IdentityServer (OnPremise) .NET 4.5 version. I need some assistance debugging a configuration issue. When I try to access my OAuth endpoint, I get a "HTTP Error 500.19 - Internal Server Error The requested page cannot …
2
votes
2 answers

STS Error "The issuer of the token is not a trusted issuer."

So for starters, here's my environment: SharePoint 2010 Windows Server 2008 Standard It's a VHD on my local machine I'm connected to my work domain I'm also connected to a VPN as well because some of the resources I need require it So I have an…
1
vote
1 answer

ADFS 2.0 token expiration time

I am caching a token issued by a ADFS 2.0 on the client and use it several times when calling the service. In the production environment I want to ensure that the token a client can cache expires after a few minutes. I have read that the token from…
flayn
  • 5,272
  • 4
  • 48
  • 69