Category Archives: IdentityModel

Adding OAuth2 to ADFS (and thus bridging the gap between modern Applications and Enterprise Back ends)

Posted on September 19, 2013 by Dominick Baier

AuthorizationServer can be combined with arbitrary authentication methods, but the fact that it comes pre-configured as a WS-Federation relying party, makes it particularly easy to combine it with e.g. ADFS. This is a really interesting scenario, because it essentially allows … Continue reading →

Posted in AuthorizationServer, IdentityModel, IdentityServer, OAuth, WebAPI | 20 Comments

Claims Transformation Middleware for Katana

Posted on September 18, 2013 by Dominick Baier

One missing piece in Katana security/authentication is claims transformation. Fortunately, this is easy to add: public class ClaimsTransformationMiddleware : OwinMiddleware {     ClaimsAuthenticationManager _claimsAuthenticationManager;       public ClaimsTransformationMiddleware(            OwinMiddleware next,             ClaimsAuthenticationManager claimsAuthenticationManager)        : base(next)     {         if (claimsAuthenticationManager == … Continue reading →

Posted in AuthorizationServer, IdentityModel, Katana, WebAPI | 10 Comments

Using AuthorizationServer with Web API v2/Katana–first look

Posted on September 15, 2013 by Dominick Baier

Traditionally we have used Thinktecture.IdentityModel to parse and validate incoming JWT tokens in Web API. The good news is, there is nothing you have to change when moving to Web API v2 – the delegating handler approach, and thus IdentityModel … Continue reading →

Posted in ASP.NET, AuthorizationServer, IdentityModel, Katana, OAuth, WebAPI | Leave a comment

Two days of Claims-based Identity & Access Control Workshop in London

Posted on July 31, 2013 by Dominick Baier

Great news! The London edition of the NDC conference has pre-con workshops and Jakob invited us to hold our claims-based identity & access control workshop there. This is the first time Brock and I are teaching the workshop together, and … Continue reading →

Posted in .NET Security, ASP.NET, AuthorizationServer, Conferences & Training, IdentityModel, IdentityServer, OAuth, OpenID Connect, WCF, WebAPI | Leave a comment

IdentityServer: Overview of OpenID Connect Basic Client Profile

Posted on July 18, 2013 by Dominick Baier
Posted in IdentityModel, IdentityServer, OAuth, WebAPI | Leave a comment

Using IdentityServer to issue tokens for Windows Server ServiceBus

Posted on July 12, 2013 by Dominick Baier

Windows Server ServiceBus supports SWT tokens to authorize actions on a SB namespace or entity (e.g. listen, send or manage). In the Azure version of ServiceBus you would use the Azure Access Control Service to issue such tokens. In the … Continue reading →

Posted in Azure, IdentityModel, IdentityServer | 8 Comments

Bringing SWT Support back to Thinktecture IdentityModel

Posted on July 9, 2013 by Dominick Baier

When Microsoft released the JWT library, I thought that’s a good opportunity to remove the SWT support from IdentityModel. But it turns out, there are still scenarios for SWT – so I refreshed my old code and added the SWT … Continue reading →

Posted in IdentityModel, IdentityServer | 1 Comment

Thinktecture AuthorizationServer v0.5 released

Posted on July 7, 2013 by Dominick Baier

I just uploaded a “feature complete” version of AuthorizationServer to Github. This version has all the features we are planning for v1 – please give us feedback when you  think things should work differently or when you find a bug. … Continue reading →

Posted in AuthorizationServer, IdentityModel, IdentityServer, OAuth, WebAPI | Leave a comment

Hawk Support in Thinktecture IdentityModel v3.3

Posted on July 4, 2013 by Dominick Baier

I just released v3.3 of IdentityModel to Github and Nuget. It includes the [Scope] attribute for Web API (here) and the clickjacking protection for MVC (here). But the biggest addition is certainly a full featured implementation of the Hawk authentication … Continue reading →

Posted in ASP.NET, IdentityModel, OAuth, WebAPI | Leave a comment

IdentityServer: Using WS-Federation with JWT Tokens

Posted on July 4, 2013 by Dominick Baier

WS-Federation is token agnostic – that means you can also use JWT tokens instead of the default SAML ones. Why would you want to do that? Well – JWT’s a slightly more compact which I think is irrelevant for WS-Federation … Continue reading →

Posted in ASP.NET, IdentityModel, IdentityServer | 8 Comments