Comments (5)
Dup: #1
from windowsauthentication.
I don't know if i got everything right, but this is how i did it:
- WindowsAuthentication Server
Download this package. I'll use the self-host option.
This "WindowsAuthentication" Server runs as a seperate process and as an additional IDP for the identity server.
I created the sts certificate, and set some options in the Startup class...
IdpReplyUrl = "https://identityserverurl/core/login",
IdpRealm = "urn:win",
EnableWsFederationMetadata = true
run it. you can check the metadata endpoint under the URL specified in the Program class.
- Identity Server
On the Identity Server, install the Microsoft.Owin.Security.WsFederation nuget package.
In your IdentityServerOptions, add
IdentityProviders = ConfigureAdditionalIdentityProviders. This may look like this
var options = new IdentityServerOptions
{
SiteName = "IdentityServer3",
SigningCertificate = Certificate.Get(),
Factory = idSvrFactory,
AuthenticationOptions = new AuthenticationOptions
{
EnablePostSignOutAutoRedirect = true,
IdentityProviders = ConfigureAdditionalIdentityProviders,
},
};
then use this piece of code as described in the identity server docs.
var windowsAuthentication = new WsFederationAuthenticationOptions
{
AuthenticationType = "windows",
Caption = "Windows",
SignInAsAuthenticationType = signInAsType,
MetadataAddress = "http://localhost:44350/",
Wtrealm = "urn:win"
};
app.UseWsFederationAuthentication(windowsAuthentication);
The Wtrealm of WsFedAuthOptions and the IdpRealm on AuthenticationServer must match, else you'll get an error like this:
IDX10214: Audience validation failed. Audiences: 'urn:win'. Did not match: validationParameters.ValidAudience: 'urn:win1' or validationParameters.ValidAudiences: 'null'
If I use my client page to access a protected resource I'll get a redirect to Identity Server, pick the "Windows" authentication provider, get a (ws fed) redirect to the WindowsAuthentication Server, see the consent page (with OAuth URL parameters) and login.
The one thing that doesn't work in my example is the redirect after logout. I can specify a wreply URL in WsFederationAuthenticationOptions and change the AuthenticationController to redirect, but that won't work if I have different clients.
from windowsauthentication.
you don't need the WsFed plugin. Unless you want to talk WsFed from Client to Idsrv
from windowsauthentication.
Yes, sorry, I got that one now.
from windowsauthentication.
Does anyone have a more complete working example? I've been trying to gather snippets from across the web to get this to work, and nothing so far has done it.
from windowsauthentication.
Related Issues (20)
- Running the sample HOT 1
- Not clear what this sample is for... HOT 1
- Is it possible to add a post-logout redirect to the Windows Authentication module? HOT 2
- Full logout using Windows authentication HOT 3
- Adding my claims HOT 3
- Windows authentication not working via console HOT 11
- Is it possible to catch 401 before IIS prompt for Id/Password? HOT 5
- WindowsAuthentication on Owin self hosted HOT 2
- Confused about IdpReplyUrl HOT 4
- Windows Authentication support HOT 2
- Unable to create to obtain configuration from 'https://....' HOT 2
- How to use WindowsAuthentication Module and IdentityServer from Console/WinForms App HOT 2
- Guideline for using Windows Authentication HOT 1
- Which expiration should be used?
- Can WindowsPrincipal be populated with first name, last name, email address etc? HOT 1
- Cannot use with OWIN 4.x and Microsoft.IdentityModel 5.x HOT 4
- ILMerge error during build HOT 5
- Can't run the WebHost project HOT 5
- Redirecting back to the application after logout (SignOutWreply) HOT 5
- Sequence contains no elements HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from windowsauthentication.