Questions tagged [wif]

The Windows Identity Foundation is a free Microsoft library that enables claims based authentication and use federated identity/single sign-on in their applications.

The Windows Identity Foundation is a free Microsoft .NET library that enables claims based authentication and use federated identity/single sign-on in their applications.

It is part of Microsoft's wider identity and access management strategy which includes Active Directory Federation Services and Windows Azure Access Control Services.

1279 questions
18
votes
3 answers

SHA256 signing stops working in .NET 4.5

We have a piece of code which creates a SigningCredentials object to use to sign xml document by using SHA256 algorithm. It works with .NET 3.5 perfectly. However, when we upgrade our codebase to .NET 4.5, it stops working. Same code, same…
Thuan
  • 1,618
  • 1
  • 10
  • 21
18
votes
5 answers

How to configure Microsoft JWT with symmetric key?

I'm trying to configure my ASP.NET app to accept a JSON Web Token (JWT) that is signed with a symmetric key. The STS isn't capable of using certificates for this, so we're using their symmetric key support. On my end, I'm using Microsoft's JWT…
Jim Mischel
  • 131,090
  • 20
  • 188
  • 351
17
votes
1 answer

What is difference between identity provider vs federation provider?

I have been reading some article on Windows Identity foundation and there are some vague definitions on federation provider(may be my understanding is not accurate). However I didn't come across one article which dilettantes between Identity…
Lost
  • 12,007
  • 32
  • 121
  • 193
17
votes
4 answers

Windows Identity Foundation sample MVC application

Is there a sample application for using WIF with a ASP.NET MVC application? Can someone help me get started trying to integrate both of these technologies?
DotnetDude
  • 11,617
  • 35
  • 100
  • 158
16
votes
2 answers

Adding Claims-based authorization to MVC 3

I have an MVC app that I would like to add claims-based authorization to. In the near future we will use ADFS2 for federated identity but for now we will used forms auth locally. Has anyone seen a tutorial or blog post about the best way to use…
chief7
  • 14,263
  • 14
  • 47
  • 80
16
votes
3 answers

What's the .NET 4.5 equivalent to UserNameWSTrustBinding?

I am converting a active profile STS to the new .NET 4.5 System.IdentityModel framework. My code using the UserNameWSTrustBinding which doesn't seem to exist in the new framework. Any suggestions.
user2009176
  • 161
  • 1
  • 3
15
votes
1 answer

How do I get to the SecurityTokenHandlers collection in WIF 4.5?

I am migrating an ASP.Net site that uses Active Federation and WIF 3.5 to use .Net 4.5. The functionality of Windows Identity Foundation (WIF 3.5) has now been fully integrated in into the .Net 4.5 Framework. Since classes have moved to three…
Mark Larson
  • 499
  • 3
  • 13
14
votes
4 answers

Best approach for SSO for Asp.Net application with Login from external application with multiple ADFS

I have an already built Asp.Net application which is using Asp.Net membership provider. There is a client web application which has its own login. Once logged in, the user gets some links. These links are directed to the application I have…
14
votes
3 answers

Perfect unique_id for device except IMEI,Android_ID,WLAN Mac and Bluetooth address

Objective: I am looking for a way to find out a unique_id for android device. Background: I will use the Id in login request payload and as my app is license based service app the Id should not change under normal circumstances. Existing…
Durai Amuthan.H
  • 31,670
  • 10
  • 160
  • 241
14
votes
1 answer

Best practices for creating custom claim types

Given a specific set of permissions, e.g. EditPage, CreateProject, ModifyUser, I am currently looking at two different ways of creating some custom claims types to model this behavior. I can find little information online about the best way to do…
mikesigs
  • 10,491
  • 3
  • 33
  • 40
13
votes
3 answers

JwtSecurityTokenHandler().ValidateToken() :: Signature validation failed... sha256 not supported in this context

I am getting the following error when I execute the JwtSecurityTokenHandler().ValidateToken() function: Here is my pseudo-code: var jwtToken = {...} var tokenHandler = new JwtSecurityTokenHandler(); var validationParameters = new…
user1265146
  • 1,985
  • 5
  • 16
  • 20
13
votes
2 answers

What is the difference between microsoft.identityModel and system.identityModel in .NET 4.5

I'm probably not the first to ask but which one should we use now ? As I understand it, it started with a very small System.IdentityModel for WCF. Then came the Microsoft.IdentityModel classes which added a whole lot more. This is the situation…
12
votes
5 answers

WIF Security Token Caching

I have a site that is a relying party to our WIF-based custom STS. We recently implemented a Security Token Cache as described here: Azure/web-farm ready SecurityTokenCache. The major difference between our implementation and the one described in…
Jeff
  • 445
  • 3
  • 12
12
votes
7 answers

Microsoft.IdentityModel: Key not valid for use in specified state

I have a claims aware web application using Windows Identity Foundation that has been working well, except on one server. I am seeing the error message shown below in the event log. Exception information: Exception type: CryptographicException…
Brice Williams
  • 588
  • 1
  • 4
  • 9
1 2
3
85 86