Questions tagged [thinktecture-ident-model]

Thinktecture IdentityModel is a versatile helper library to make working with Claims Based Authentication and Windows Identity Foundation easier.

Thinktecture IdentityModel is a versatile helper library to make working with Claims Based Authentication and Windows Identity Foundation easier.

The library is written by Dominick Baier, a security expert involved with the creation of WIF and co-author of Claims Based Identity & Access Control Guide. Source code for the project can be found on Git Hub. Many blog posts on the code can be found on Dominic's blog - leastprivilege.com.

Note - the tag name uses "ident" to fit within 25 character maximum

97 questions
0
votes
2 answers

Sample HTTPClient code to authenticate against Embedded STS

We are using Embedded STS locally to test our ASP.Net web application. I'm creating a console app to call some of the WebAPI methods and to do some load testing on our app. I'd like to test using a set of users with certain permissions. For our…
Szymon Rozga
  • 17,971
  • 7
  • 53
  • 66
0
votes
0 answers

SessionAuthenticationModule "validFrom" appears invalid with ThinkTecture

I have an ASP.NET website with two IDP servers running ThinkTecture software authenticating the users using WS-FED. When I login with IDP server #1, I can login fine, the IDP issues the token to my website and I get a session token as expected and I…
0
votes
0 answers

Thinktecture Basic Auth WebApi disable on route

I have basic auth wired up using Thinktecture to my WebApi. Is there a way to disable this auth on a single route? Trying to publicly expose a single endpoint. I'm restricted to WebApi v1, in case that makes a difference in the answer.
0
votes
0 answers

Using Thinktecture's Owin method : UseSaml2BearerAuthentication

I'm working on a wsFederation POC for my company. The solution should work with MVC apps and webapi services as well. I figured out how to have it working on MVC apps, using the new OWIN authentication middleware. At that point I'm getting SAML2…
0
votes
0 answers

Trouble with AuthenticationConfiguration from Thinktecture, $http request to WebApiController stop to work

I have the trouble with AuthenticationConfiguration, when I put the AuthenticationConfiguration in the WebApiConfig my $http request stop to work. I get error Failed to load resource: the server responded with a status of 403 (HTTPS…
0
votes
2 answers

Decode ThinkTecture Identity Server JWT token

I have managed to get back a JWT token from Identity Server using OAuth2 and would like to extract the claims from the token. When I use a token decoder such as https://developers.google.com/wallet/digital/docs/jwtdecoder, I can peek inside the…
0
votes
1 answer

MembershipReboot vs Thinktecture Identity Model

What are the differences between MR and IM in terms of extensibility, stability, security and such? Which one would be more preferable for a single tenant application?
DarthVader
  • 52,984
  • 76
  • 209
  • 300
0
votes
1 answer

what is the real time usage of WS-TRUST and WS-FED

i read about 2 WS* protocols , WS-TRUST and WS-FED. but i am confused about real time scenario how to use these protocols . can anyone let me know in which scenarios i can use WS-TRUST and WS-FED ? it would be very helpful if someone can tell…
0
votes
1 answer

Simultaneous wsfed and hrd authentication in an application - Thinktecture Identity Server

I need to support both authentication methods in an application - WS Federation (wsfed) and Home realm discovery (hrd). I am having installed and customized Thinktecture identity server, but I am stack with achieving the above scenario. I am not…
0
votes
1 answer

Is it possible to use Thinktecture's IdentityModel and a System.IdentityModel SessionAuthenticationModule cookie in the same application?

I have a web app which contains services used by both a browser delivered javascript application and also an Android mobile phone application. The javascript application uses a System.IdentityModel.SessionAuthenticationModule cookie for…
BenCr
  • 5,991
  • 5
  • 44
  • 68
0
votes
1 answer

CORS headers not being refreshed due to OutputCache in MVC 4 using the Thinktecture IdentityModel package

Presently I am using Thinktecture package for CORS support with my MVC 4 application. on adding the output cache attribute for a method, the CORS support is lost because the HTTP headers are probably cached and the ORIGIN is not modified w.r.t. the…
0
votes
1 answer

SAML2 using Thinktecture and WCF

I'm setting up a SAML2 STS using Thinktecture IdentityServer and a WCF Service. The idea is to have Thinktecture supply the Assertions that are then used in the WCF Service. Now, I have it running all fine with SAML 11 Assertions -…
0
votes
1 answer

Thinktecture IdentityServer, remove issued token

I am looking for a way to invalidate or remove the token that has been issued out to the consumer. The scenario is when a user's password is changed, we want to make sure all the issued tokens can't not be used anymore.
Eatdoku
  • 6,569
  • 13
  • 63
  • 98
0
votes
1 answer

Adding Claim to UserClaims

I am trying to build a claims aware Application using MembershipReboot library for authentication Thinktecture.IdentityModel.45 for authorization. As far as tutorials go, they are all adding Claims manually to the "UserClaims" Table (not sure which…
0
votes
1 answer

Thinktecture.IdentityModel.45, Routing, wants to invoke identity controller

I'm trying to use Thinktecture.IdentityModel.45 for authentication in ASP.NET Web API. I'm trying to get the Basic Authentication to work. And have downloaded the source and got the sample to work. (JsBasicAuth). We have Web API in the same project…
Erik Sundström
  • 997
  • 1
  • 12
  • 29