Re: ADFS with ASP application

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Thanks a lot for sharing the information Joe.
So far I was looking at claim aware app, via the Step by step guide,
will start poking around token model now and post if I run into
trouble.

Thanks again,
- Vivek

Joe Kaplan wrote:
ADFS can work here if you use the Windows token model for integration (using
the stuff integrated into the IIS MMC UI). In that mode, ADFS can work with
any app that runs on IIS. The app doesn't need to be .NET 2.0 (although
.NET 2.0 must be installed on the machine for ADFS to be installed and
used).

You would change the setting in IIS from integrated to anonymous, but ADFS
would actually create a Windows token for you with the ADFS agent and the
app would continue to function as if it was working like integrated auth.

The real trick here is coming up with a viable strategy for how you want to
map user tokens (shadow users or shadow groups).

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
<viveque.kumar@xxxxxxxxx> wrote in message
news:1168012536.605350.251840@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

We have a legacy ASP application and we are looking at SSO for an
integration project.

Our application works on Integrated authentication mechanism and the
requirement is that users from other domains when accessing this
application need not sign in again.

So after some research I stumpled upon ADFS to achieve this.

My question is this, given the above scenario, will ADFS work here?
Doesn't ADFS require ASP.NET applications?
Will the application security settings need to be changed from
Integrated to Anonymous?

TIA,
- Vivek


.

Relevant Pages

  • Re: ADFS with ASP application
    ... incoming group claim to user on resource computer .Is it correct? ... able to bypass ADFS to get into the application. ... It is generally much easier to troubleshoot this with a claims app first ... map user tokens. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS and authorization
    ... However, if your app needs a ticket with a specific claim, the app needs to ... mapping of federation users to Windows tokens can be painful. ... Raw claims gives you the most power, but couples you directly to the ADFS ... authorization framework that can benefit from the additional abstraction. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS and authorization
    ... However, if your app needs a ticket with a specific claim, the app needs to ... mapping of federation users to Windows tokens can be painful. ... Raw claims gives you the most power, but couples you directly to the ADFS ... authorization framework that can benefit from the additional abstraction. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS and authorization
    ... However, if your app needs a ticket with a specific claim, the app needs to ... mapping of federation users to Windows tokens can be painful. ... Raw claims gives you the most power, but couples you directly to the ADFS ... authorization framework that can benefit from the additional abstraction. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS and authorization
    ... However, if your app needs a ticket with a specific claim, the app needs to ... mapping of federation users to Windows tokens can be painful. ... Raw claims gives you the most power, but couples you directly to the ADFS ... authorization framework that can benefit from the additional abstraction. ...
    (microsoft.public.windows.server.active_directory)