3 Articles match "STS","WCF"

26 Articles match "STS","WCF"

• The Best from DevelopMentor

  MORE

• Using Silverlight to Access WIF secured WCF Services
  
  Another technology that comes up very often is Silverlight – and especially the “story” of Silverlight and WCF/WIF. This back-end service requires an issued token from a STS. Those of you with WCF background will say: “that’s what the federation bindings in WCF are for”. Since Silverlight has no support for WS-Trust, we must find another way to request a token from a STS. Some remarks here: Since you cannot do the proof of possession crypto in Silverlight, you need to request bearer tokens from the STS. The STS roundtrip is a cross-domain request.
  www.leastprivilege.com - Wednesday, October 28, 2009
  READ MORE
• Securing a Workflow Service using Windows Identity Foundation
  
  In windows the preferred form of federated security is through Windows Identity Foundation and it is real easy to secure an ASP.NET site or WCF service using Windows Identity Foundation. As a workflow 4 service is just another WCF service securing it is just as easy as the steps below will demonstrate. Adding the STS to the service is quite easy. Because the STS Dominick Baier has running supports multiple ways the user can authenticate, either username/password or certificate, we still need to fix the configuration a bit. How about securing a workflow service?
  The Problem Solver - Friday, September 24, 2010
  READ MORE
• Using Silverlight to Access WIF secured WCF Services (Part 2)
  
  am focusing here purely on the SL initiated active STS/RP communication scenario and the raw APIs. cache.AddTokenToCache( "myRP" , args.Result); }; client.IssueAsync(rst); Using a Token to authenticate with a WCF Relying Party. This allows calling a WCF service like this: private void CallService(). {. The trick here again is, that the client stack is configured for no security at all, whereas the WCF service uses a federation binding (with SecureConversation turned off). thought I give this another shot with the new SL/WIF integration. KeyTypes.Symmetric). {.
  www.leastprivilege.com - Sunday, March 21, 2010
  READ MORE
• Limiting which user can access service using the Windows Identity Foundation
  
  With this in place we only allow users that are trusted by the STS Dominick Baier wrote. Using an STS we don’t get the user credentials from the client application but we do get a lot of information in the form of security tokens from the STS my means of a SAML header. The STS is free to add extra claims as it sees fit and we can use any claim we want to authorize users. And the STS Dominick Baier wrote also contains a claim for which office the user is based in. Tags: NET Workflow WCF WF4 VS2010 WIF result = (from i in context.Principal.Identities.
  The Problem Solver - Monday, September 27, 2010
  READ MORE
• WIF, ADFS 2 and WCF–Part 6: Chaining multiple Token Services
  
  So far we looked at the (simpler) scenario where a client acquires a token from an identity provider and uses that for authentication against a relying party WCF service. Another common scenario is, that the client first requests a token from an identity provider, and then uses this token to request a new token from a Resource STS or a partner’s federation gateway. The realm used for this request is the identifier of the Resource STS/federation gateway. Use the resulting token to request a new token from the Resource STS/federation gateway. That’s it.
  www.leastprivilege.com - Thursday, October 28, 2010
  READ MORE
• WIF, ADFS 2 and WCF–Part 5: Service Client (more Flexibility with WSTrustChannelFactory)
  
  You first request a token from the STS and then use that token to create a channel to the relying party service. The following code requests a token for a WCF service from ADFS 2: private static SecurityToken GetToken(). {. // Windows authentication over transport security. You also get more control over the token request itself since you have full control over the RST message that gets send to the STS. When you use the automatic token support in the WCF federation binding, the appliesTo is always the physical service address. See the previous posts first.
  www.leastprivilege.com - Thursday, October 14, 2010
  READ MORE
• WIF, ADFS 2 and WCF–Part 1: Overview
  
  The bindings behind the endpoints are more or less standard WCF bindings, but with SecureConversation ( establishSecurityContext ) disabled. ADFS in the R-STS role (with a chained claims provider). Using the WCF bindings for automatic token issuance. A lot has been written already about passive federation and integration of WIF and ADFS 2 into web apps. The whole active/WS-Trust feature area is much less documented or covered in articles and blogs. ADFS 2 has a number of endpoints under the /services/trust base address that implement the WS-Trust protocol. Stay tuned….
  www.leastprivilege.com - Monday, October 11, 2010
  READ MORE