Questions tagged [sts-securitytokenservice]

Security Token Service. A web service where a user (or client software) presents some form of credentials (e.g., username/password), and if valid the result is a 'security token' that can be used to access a web application or web service. Often used for implementing single sign-on (SSO).

Security Token Service: A web service where a user (or client software) presents some form of credentials (e.g., username/password), and if valid the result is a 'security token' that can be used to access a web application or web service. Often used for implementing single sign-on (SSO).

167 questions
1
vote
1 answer

Error invoking IssueToken operation on WSO2 Identity Server Security Token Service

I'm getting a cryptic error message - Wrong element order encountred at Reason Here's a summary of what I am doing: I’ve applied the UsernameToken security policy to the Security Token Service. I've added my app (http://localhost:3000/) as a…
1
vote
1 answer

What is the equal control for FederatedPassiveSignInStatus control in .net 4.5?

I have written an STS (security token service) for single sign-on. But i have used .net 4 and the Microsoft.IdentityModel and Microsoft.IdentityModel.Web.Controls. Now i wanna convert my code to .net 4.5 but there is no namespace for handling the…
1
vote
1 answer

Does Windows Identity Foundation (WIF) supports STS'es based on WS-Trust

Our partner is trying to setup a PicketLink STS which according to spec is based on WS-Trust. I can't find any information whether or not WIF is supporting this. I know it supports WS-Federation which is an extension on WS-Trust. Most of the time…
Martijn B
  • 4,065
  • 2
  • 29
  • 41
1
vote
2 answers

Using SQL Account Store in Geneva

Geneva has me pretty hot and bothered as a potential to solve complicated auth and SSO issues that have been presented to us by our customers. I understand that Geneva supports custom and SQL-based attribute stores. However, I need support for…
1
vote
2 answers

SharePoint 2013 access denied error after successful login

SharePoint is showing strange behavior that when I use my Custom login page which is using the credentials entered to get authenticated by my Custom Security Token service (Trusted Identity provider) for SharePoint. When my Identity provider sends a…
Aakif
  • 91
  • 2
  • 7
1
vote
1 answer

What do i do after getting the token?

Here's the situation and what should i do now I have put CustomSTS as default selection in Home realm discovery page ( already configured the Custom STS as Claims Provider Trust ) Any relying party added to ADFS 2.0 will now come back to Custom STS…
1
vote
0 answers

How to implement an active endpoint and passive STS with in one STS?

I have been struggling to find out how can I implement Active STS and Passive STS with in one STS. Well the requirement is that I need to allow the applications to have their own login pages but they should get authentication through Custom STS…
Aakif
  • 91
  • 2
  • 7
1
vote
1 answer

STS Keyset does not exist even after MMC permission granted

My application creates virtual directories on the fly as well as application pool for the STS-enabled web applications that run in those virtual directories. The application pools run under the ApplicationPoolIdentity account (IIS…
1
vote
0 answers

Calling a Metro based Security Token Service from an Axis2 STS Client

I want to call a Security Token Service which was created and deployed using Metro 2.2 framework from an Axis 2 STS Client. I'm trying to do the same but getting issues like the one below: - java.lang.RuntimeException:Incorrect inclusion value:…
1
vote
0 answers

How to get the username and password when create my own STS via WIF

I'm using WIF to build a custom STS. After inherited the SecurityTokenService class, I hosted my STS as a WCF service by using the WSTrustServiceHost and IWSTrust13SyncContract. And since it's just a prototype STS I was using BasicHttpBinding. On…
Shaun Xu
  • 4,476
  • 2
  • 27
  • 41
1
vote
1 answer

DualChannel binding over Federation Security

We are running a set of WCF services over HTTPS and using the ws2007FederationHttpBinding binding to authenticate against a STS. Now we need to add a dual/duplex service using the same authentication technique. Know Your Binding Options states that…
esskar
  • 10,638
  • 3
  • 36
  • 57
1
vote
1 answer

ASP.NET and WCF Authentication Options

What are the authentication options for having a ASP.NET web application communicating with a WCF service? The scenario: User enters their username and password in an ASP.NET form. ASP.NET needs to pass this to WCF to authenticate the user. If…
Bob Wintemberg
  • 3,212
  • 6
  • 34
  • 44
1
vote
0 answers

RequestSecurityTokenResponse won't deserialize

I've got a WCF client connecting to an STS server, which I don't have any control over (it's a 3rd party PHP service). After days of research I managed to talk to the server in a way it accepts using purely WCF. Of course, it would have been easy to…
1
vote
1 answer

Do we need to implement some logic in Windows Identity Foundation's SecurityTokenService when user logs out?

I am implementing my own SecurityTokenService that's derived from the WIF's STS. Do I need to implement Cancel method compulsorily? By default Windows Identity Foundation's SecurityTokenService is instanciated per call as stated in this article. If…
Learner
  • 4,661
  • 9
  • 56
  • 102
0
votes
2 answers

Using WCF STS Bootstrap token in SharePoint 2010 (thinktecture identity server as sts and ActAs)

Has anybody used bootstrap tokens inside SharePoint 2010 when using a custom STS. I've been struggling with this for a few hours now. Whenever I issue the RST I get the following error message: ID4257: X.509 certificate 'CN=SharePoint Security Token…