Questions tagged [ws-federation]

WS-Federation is an Identity Federation specification, which provides mechanisms for allowing differential security realms.

WS-Federation is an Identity Federation specification, which provides mechanisms for allowing differential security realms to arrange information on identities, identity attributes and authentication.

WS-Federation is developed by many companies - BEA Systems, CA Incorporated, BMC Software, IBM, Layer 7 Technologies, Microsoft, VeriSign and Novell.

441 questions
6
votes
3 answers

Prevent XmlHttpRequest redirect response in .Net MVC WS-Federation Site

I'm using WS Federated (Claims Aware) authentication on an MVC 3 site and am having trouble keeping some of my API controllers that send JSON from returning a redirect when the authentication fails. I have an Area called API with several…
Jacob
  • 3,629
  • 3
  • 36
  • 44
6
votes
4 answers

Transparent SSO with SAML (IE, SAML 2.0, ADFS, Kerberos authentication)

Configuration is: ADFS 2.0 as IdP (both WS-Federation and SAML 2.0 are supported), ASP.NET app as Service Provider. When SPS requests ADFS with WS-Federation standard (WIF used) it lets me login to ADFS automatically with no login pop-up window even…
YMC
  • 4,925
  • 7
  • 53
  • 83
6
votes
1 answer

AspNetCore.WsFederation get signin-wsfed redirect to HTTP when original request is HTTPS

The context is an aspnetcore 2.1 website hosted in a Docker container on port HTTP, along with the use of an Nginx reverse proxy exposing HTTPS 443 only. The website is accessed from the outside on HTTPS, it redirects to an STS website on HTTPS,…
6
votes
0 answers

How to get new or refresh access token with wsfed for .net core?

I am using wsfederation(with pingfederate as IDP) for authenticating. This is working fine for getting access token first time, but when the token got expired, I need to get a new token or refresh token. In .NET framework 4.7.2 it is working fine as…
Diboliya
  • 1,124
  • 3
  • 15
  • 38
6
votes
2 answers

Use IdentityServer 4 and WS-Federation

I realise that .Net Core doesn't support WS-Federation. However I would really like to use IdentityServer 4, which I realise also doesn't support WS-Federation. However if I have an ASP.Net Core website and I target the full .Net framework, would…
user917170
  • 1,591
  • 15
  • 28
6
votes
1 answer

WsFederation authentication in Service Fabric Owin Pipeline not working

G'day! I haven't seen much on this because its all very new at the time of this writing. I am trying to write a service fabric application that serves a web app (html/js) after the user has been authenticated via ACS. I can easily get this to work…
Mil
  • 81
  • 3
6
votes
2 answers

Add roles to ADFS IPrincipal

I have been looking for answer to this question for a few days now, but I have not found any success. I would post the links, but it would probably take up the entire page. So here is what I have... I have an MVC application, which uses the…
Rogala
  • 2,679
  • 25
  • 27
6
votes
2 answers

URL fragment lost as part of SAML token authentication; workaround / standard pattern?

Several web application authentication protocols (like WS-Federation and the SAML protocol, i.e., so-called 'passive' protocols, and apparently also ASP.NET Forms authentication, see this StackOverflow question, and AppEngine, see this GWT bug…
5
votes
0 answers

Configuring SSL (https) for ws2007FederationHttpBinding Endpoint 404 No Endpoint found

Another WIF related problem - can anyone point me in the direction of how to configure https in wcf for a ws2007FederationHttpBinding endpoint. I have the certificates and bindings all set-up in IIS, but whenever I try to connect to the endpoint I…
Matt Whetton
  • 6,616
  • 5
  • 36
  • 57
5
votes
1 answer

Using WIF with asp.net MVC 3, where do I define the STS Sign out endpoint?

I see that the FedMetadata document can provide signout notification and subscription endpoints, and web.config defines the issuer url for sign in requests, but I can't find where WIF knows to send sign out requests. If the STS I'm using defines…
ryanhallcs
  • 237
  • 1
  • 14
5
votes
2 answers

ASP.NET MVC - WS Federation - Single Sign out

I'm implementing SSO (Single Sign On and Single Sign Out) for my applications. Let's say I have Application "A" that is Hosted on https://app1.test.com Is registered in AD on-premise with Wtrealm same as https://app1.test.com Application "B"…
Hiren Desai
  • 941
  • 1
  • 9
  • 33
5
votes
2 answers

Difference between adfs and azure AD

Differences between ADFS and Azure AD I understand that ADFS is a STS (Secure Token Service) in the sense that it issues tokens to applications that helps applications establish user identity. At an organization level, our org uses ADFS with…
The Inquisitive Coder
  • 1,085
  • 3
  • 20
  • 43
5
votes
1 answer

IdentityServer4 multiple WSFederation-providers cause an exception

I was told that the issue I will describe here is not a bug in the IdentityServer, so I'm probably doing something wrong: This code works, using a single WSFederation-instance as identity provider in the QuickStart-project using EFCore. Registering…
Christoph Sonntag
  • 4,459
  • 1
  • 24
  • 49
5
votes
1 answer

How does Azure Active Directory support federation with Okta as an IDP?

Is it possible to integrate Okta as an IDP (Identity Provider) for an application in Azure, where Azure would be the Service Provider? Presently the authentication is managed by Azure AD, we have AD users that have been granted access to these…
5
votes
1 answer

Identity Server 4 Federation Gateway

I'm not really seeing a lot of documentation but I have implemented external authentication and external providers. But what's missing for me is: How does one configure a client application to point to the federation gateway? How do you configure…
punished.snake
  • 155
  • 1
  • 9
1
2
3
29 30