Questions tagged [wif]

The Windows Identity Foundation is a free Microsoft library that enables claims based authentication and use federated identity/single sign-on in their applications.

The Windows Identity Foundation is a free Microsoft .NET library that enables claims based authentication and use federated identity/single sign-on in their applications.

It is part of Microsoft's wider identity and access management strategy which includes Active Directory Federation Services and Windows Azure Access Control Services.

1279 questions
6
votes
1 answer

Off-the-shelf Security Token Service (STS) that uses ASP.NET membership provider?

I'd like to move a site that currently uses the standard ASP.NET membership provider to use claims-based authentication through Windows Identity Foundation and Azure ACS. We're going to surface the site using OAuth 2.0 secured REST services so this…
Jeremy McGee
  • 24,842
  • 10
  • 63
  • 95
6
votes
1 answer

validateRequest="false" not working, even with requestValidationMode="2.0"

I have an ASP.NET Web Site running in Visual Studio dev-fabric (azure project) and am using ACS and WIF. My authentication process isn't working because after I login I get this: A potentially dangerous Request.Form value was detected from the…
ConfusedNoob
  • 9,826
  • 14
  • 64
  • 85
6
votes
1 answer

Windows Presentation Foundation (WPF) + Windows Identity Foundation (WIF)

Scenario: I need to configure a WPF application to send credentials from integrated security to an ADFS server and receive tokens back. I can't find guides describing in detail how to do this. The focus seems to be on web applications, web…
user634646
  • 61
  • 1
  • 4
6
votes
4 answers

Is WIF a good option for securing WCF 4.0 Restful service with iPhone

I have a project which needs to expose WCF restful service to iphone/ipad Client. The WCF worked, now i need to secure it with username and password. For some reason i am a little reluctant to go with CustomBasicAuth Oauth is also not ideal in WCF…
D.J
  • 2,534
  • 4
  • 28
  • 43
6
votes
1 answer

Create SAML response from assertion in C# 4.5 (WIF)

I need a way to POST a message to a certain URL, its fairly simple and .NET helps me with Saml2Assertion class but I can't seem to find a way to wrap that assertion in a response and have it serialized (or even send without manual…
mmix
  • 6,057
  • 3
  • 39
  • 65
6
votes
1 answer

How to implement SAML2 authentication in .net 4.5 against AzureAD? (Consuming Tokens)

I'd like to allow SAML authentication for my web app, including against AzureAD as an identity provider and also ADFS. (Can anyone point me to a good tutorial or walkthrough on this?) I've got so far as generating the SAML Request, getting back a…
Rory
  • 40,559
  • 52
  • 175
  • 261
6
votes
1 answer

WCF net.tcp issued token

Does anyone have a current example of using net.tcp with message security mode of issued token. I currently have a security token service that issues tokens but not sure how to configure it with net.tcp. I only see examples of using…
Fab
  • 904
  • 2
  • 14
  • 38
6
votes
2 answers

ClaimsAuthenticationManager.Authenticate never gets called

I want to add some additional claims to a Principal during authentication. I am trying to implement a custom ClaimsAuthenticationManager in my MVC 4.5 project which uses Windows Authentication: namespace Project.Infrastructure { public class…
newmanth
  • 408
  • 7
  • 18
6
votes
1 answer

How do you use IPrincipal and IIdentity in the portable class libraries?

With WIF (Windows Identity Foundation) 4.5, Microsoft created the WindowsPrincipal class, which is a type of ClaimsPrincipal. Of course, these classes aren't portable, but the interfaces behind them are (IPrincipal). The same can be said of the…
michael
  • 14,844
  • 28
  • 89
  • 177
6
votes
3 answers

How to remember the login in MVC5 when an external provider is used

In our MVC5-application with OWIN, we use additional to the local accounts also external logins (google). When the user logs in with its local account, he can activate the option to remember him, so he has not to log-in every time newly. When he…
HCL
  • 36,053
  • 27
  • 163
  • 213
6
votes
2 answers

WIF (Windows Identity Foundation) with SAML 2.0

First some background: We were recently tasked to send a SAML 2.0 assertion to the server that we are communicating with. We are using WCF for our client. The server is not using WCF. The guys who implement the server, don't have an STS that will…
Vadim Rybak
  • 1,677
  • 20
  • 25
6
votes
2 answers

Using ADFS 2.0 with non-.NET services

I am looking at ways to tie together a number of Windows-based web services together under single-sign-on. Microsoft's Windows Identity Framework and ADFS 2.0 are the perfect tools for the job, except that not all of our web services are written in…
Brad G.
  • 801
  • 5
  • 12
6
votes
1 answer

Why does my STS client get this error? "The value of the 'type' property could not be parsed.Verify that the type attribute of 'issuerNameRegistry..."

I frequently encounter this error and my efforts had not any result. Error : ID8030: The value of the 'type' property could not be parsed.Verify that the type attribute of 'issuerNameRegistry type="Webapp1.TrustedIssuerNameRegistry,webapp1"…
6
votes
2 answers

Using Windows Identity Foundation to log someone in to an ASP.net application

My supervisor at the office tells me that he saw a demonstration with a pre-release version of Microsoft "Geneva" (now Windows Identity Foundation) where a developer did the following: He set up some sort of ASP.net web application where a user…
Vivian River
  • 31,198
  • 62
  • 198
  • 313
6
votes
1 answer

Secure WebAPI with a JWT

I'm trying to write a mobile application that will get data from a webapi rest based site. The site should be secured via ACS (as there can be multiple identity providers). My mobile app is currently querying the following url…
Ross Dargan
  • 5,876
  • 4
  • 40
  • 53