Category Archives: IdentityModel

StarterSTS hits 10k downloads

Posted on February 17, 2012 by Dominick Baier

Thanks to all who downloaded, tested and improved StarterSTS. We just hit 10k downloads.   Now it is time to move on. Please use IdentityServer from now on, as StarterSTS will not be maintained anymore. Have fun!

Posted in IdentityModel, IdentityServer | Leave a comment

IdentityServer v1.0.1 On-Premise and Azure Edition

Posted on February 17, 2012 by Dominick Baier

I just uploaded the final Azure Edition as well as a combined Azure and on-premise source package to Codeplex. http://identityserver.codeplex.com/releases I am also in the process of building a wiki for documentation – it is not done yet – but … Continue reading →

Posted in IdentityModel, IdentityServer | Leave a comment

Web Apps vs Web Services: 302s and 401s are not always good Friends

Posted on February 10, 2012 by Dominick Baier

It is not very uncommon to have web sites that have web UX and services content. The UX part maybe uses WS-Federation (or some other redirect based mechanism). That means whenever an authorization error occurs (401 status code), this is … Continue reading →

Posted in IdentityModel | Leave a comment

Replacing ASP.NET Forms Authentication with WIF Session Authentication (for the better)

Posted on February 9, 2012 by Dominick Baier

ASP.NET Forms Authentication and WIF Session Authentication (which has *nothing* to do with ASP.NET sessions) are very similar. Both inspect incoming requests for a special cookie that contains identity information, if that cookie is present it gets validated and if … Continue reading →

Posted in ASP.NET, IdentityModel | 17 Comments

Mixing Forms and Token Authentication in a single ASP.NET Application (the Details)

Posted on February 2, 2012 by Dominick Baier

The scenario described in my last post works because of the design around HTTP modules in ASP.NET. Authentication related modules (like Forms authentication and WIF WS-Fed/Sessions) typically subscribe to three events in the pipeline – AuthenticateRequest/PostAuthenticateRequest for pre-processing and EndRequest … Continue reading →

Posted in IdentityModel | 8 Comments

Mixing Forms and Token Authentication in a single ASP.NET Application

Posted on February 2, 2012 by Dominick Baier

I recently had the task to find out how to mix ASP.NET Forms Authentication with WIF’s WS-Federation. The FormsAuth app did already exist, and a new sub-directory of this application should use ADFS for authentication. Minimum changes to the existing … Continue reading →

Posted in ASP.NET, IdentityModel | 3 Comments

ACS for free ‘til December 2012

Posted on December 21, 2011 by Dominick Baier

see here: http://blogs.msdn.com/b/windowsazure/archive/2011/12/20/important-announcements-regarding-the-access-control-service.aspx

Posted in IdentityModel | Leave a comment

Claims Guide–2nd Edition PDF

Posted on December 12, 2011 by Dominick Baier

http://tinyurl.com/claimsguide2

Posted in Conferences & Training, IdentityModel, IdentityServer | 2 Comments

Token based Authentication for WCF HTTP/REST Services: Authorization

Posted on November 16, 2011 by Dominick Baier

In the previous post I showed how token based authentication can be implemented for WCF HTTP based services. Authentication is the process of finding out who the user is – this includes anonymous users. Then it is up to the … Continue reading →

Posted in IdentityModel, IdentityServer | 2 Comments

Token based Authentication for WCF HTTP/REST Services: The Client

Posted on November 15, 2011 by Dominick Baier

If you wondered how a client would have to look like to work with the authentication framework, it is pretty straightfoward: Request a token Put that token on the authorization header (along with a registered scheme) and make the service … Continue reading →

Posted in IdentityModel, IdentityServer | Leave a comment