Monthly Archives: October 2012

Update on Thinktecture IdentityServer v2 Beta (Refresh 2)

Posted on October 29, 2012 by Dominick Baier

Just wanted to give you a quick update what’s happening with IdentityServer. Brock and I were working really hard to get some new features in, e.g. Mobile support for the login and home realm discovery pages Standards compliant OAuth2 flows … Continue reading →

Posted in ASP.NET, IdentityModel, IdentityServer, WCF, WebAPI | Leave a comment

Using Claims-based Authorization in MVC and Web API

Posted on October 26, 2012 by Dominick Baier

.NET 4.5 ships with a claims-based authorization infrastructure around the ClaimsAuthorizationManager class. I have written about that before, and I am still a fan of that approach (not necessary of the non-existent tooling). Claims-based authorization encourages you to have a … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, WebAPI | 48 Comments

Extensions to the Web API/MVC + Forms/Basic Auth Sample: Claims Transformation and AJAX

Posted on October 24, 2012 by Dominick Baier

I got two questions on the sample from yesterday. AJAX Clients”Will AJAX clients be able to use the Forms Authentication cookie against Web API?” Yes, indeed. In that case add the following flag to the authentication configuration: var authConfig = … Continue reading →

Posted in ASP.NET, IdentityModel, WebAPI | 8 Comments

Mixing MVC + Forms Authentication and Web API + Basic Authentication

Posted on October 23, 2012 by Dominick Baier

Got several emails recently with questions on how to enable the following scenario: ASP.NET application (e.g. MVC) using Forms Authentication and Web APIs using Basic Authentication to authenticate against a unified user store. This is actually quite simple to achieve … Continue reading →

Posted in ASP.NET, IdentityModel, WebAPI | 27 Comments

Federation Gateway and Home Realm Discovery in Thinktecture.IdentityServer v2

Posted on October 18, 2012 by Dominick Baier

I just uploaded a “feature-refresh” of the IdSrv Beta to github. This includes amongst some bug fixes the ability to use IdSrv as a federation gateway/home realm discovery page. This gives you the ability to use IdSrv to broker trust … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer | 1 Comment

Thinktecture IdentityServer 2 Tutorial: The 1st Web Application

Posted on October 18, 2012 by Dominick Baier

https://vimeo.com/51666380 Shows how to setup a web application with identity server for authentication. Have fun!

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer | 2 Comments

Feedback for IdentityModel and IdentityServer

Posted on October 15, 2012 by Dominick Baier

Thanks for all the feedback!! To keep things more organized, please use the issue tracker on github. Otherwise all the information will be scattered across IM, email, twitter and blog comments… https://github.com/thinktecture/Thinktecture.IdentityModel.45/issues https://github.com/thinktecture/Thinktecture.IdentityServer.v2/issues thanks!

Posted in Uncategorized | Leave a comment

Samples for Thinktecture.IdentityModel

Posted on October 12, 2012 by Dominick Baier

Many people seem to overlook the samples directory in IdentityModel. So I thought I quickly summarize what you can find there: CorsSamplesSamples and test that show the usage of the CORS support in Web API, MVC and plain IIS. Web … Continue reading →

Posted in ASP.NET, IdentityModel, IdentityServer, WCF, WebAPI | 32 Comments

Setup Thinktecture IdentityServer v2 in 7 minutes

Posted on October 12, 2012 by Dominick Baier

Here’s how: https://vimeo.com/51088126 HTH

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, WCF, WebAPI | 7 Comments

Thinktecture IdentityServer v2 BETA

Posted on October 12, 2012 by Dominick Baier

IdentityServer v2 beta is done! You can get it from the new thinktecture organization page on github as well as the new project page for IdentityServer (or directly from the download page). What’s new?Well – on the surface IdSrv 2 … Continue reading →

Posted in .NET Security, ASP.NET, IdentityModel, IdentityServer, WCF, WebAPI | 7 Comments