Configure Active Relying Party STS to Trust Multiple Identity Provider STSes

Posted by CodeChef on Stack Overflow See other posts from Stack Overflow or by CodeChef
Published on 2010-04-30T20:31:36Z Indexed on 2010/05/25 4:21 UTC
Read the original article Hit count: 434

Filed under:

wcf

|

WIF

|

geneva-framework

|

sts

|

securitytokenservice

I am struggling with the configuration for the scenario below.

I have a custom WCF/WIF STS (RP-STS) that provides security tokens to my WCF services
RP-STS is an "Active" STS
RP-STS acts as a claims transformation STS
RP-STS trusts tokens from many customer-specific identity provider STSes (IdP-STS)
When a WCF Client connects to a service it should authenticate with it's local IdP-STS

The reading that I've done describes this as Home Realm Discovery. HRD is usually described within the context of web applications and Passive STSes. My questions is, for my situation, does the logic for choosing an IdP-STS endpoint belong in the RP-STS or the WCF Client application?

I thought it belonged in the RP-STS, but I cannot figure out the configuration to make this happen. RP-STS has a single endpoint, but I cannot figure out how to add more than one trusted issuer per endpoint.

Any guidance on this would be very appreciated (I'm out of useful keywords to Google.) Also, if I'm way off please offer alternative approaches.

Thanks!

alt text

© Stack Overflow or respective owner

Related posts about wcf

Calling a WCF service from another WCF service

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi ! I have a WCF service hosted on a windows service on my Server1. It also has IIS on this machine. I call the service from a web app and it works fine. But within this service, I have to call another WCF sevice (also hosted on a windows service) located on Server2. The security credentials are… >>> More
wcf + Byte array through wcf service using MTOM

as seen on Stack Overflow - Search for 'Stack Overflow'
Hi, How to pass Byte array through wcf service using MTOM..please give me any sample >>> More
WCF 4.0 new enhancements over WCF 3.5

as seen on Stack Overflow - Search for 'Stack Overflow'
What are the new enhancements in WCF 4.0 and how easy would it be to upgrade existing WCF services to 4.0? >>> More
Reuse classes and objects for both WCF and non-WCF

as seen on Stack Overflow - Search for 'Stack Overflow'
I have several classes such as Order, Customer, etc. These classes serve for holding data and nothing more. I want to be able to reuse these classes in other projects in the future, but for some reason I don't quite understand, WCF forces me to decorate the data members with the [DataMember] attribute… >>> More
Summarizing client side asynchronous invocations in WCF/WCF Silverlight

as seen on Code Project - Search for 'Code Project'
Summarizing client side asynchronous invocations in WCF/WCF Silverlight. Introducing ServiceClient class. >>> More

Related posts about WIF

Book Review: Programming Windows Identity Foundation

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
Programming Windows Identity Foundation by Vittorio Bertocci is right now the only serious book about Windows Identity Foundation available. I started using Windows Identity Foundation when I made my first experiments on Windows Azure AppFabric Access Control Service. I wanted to generalize the… >>> More
WIF using SAML 2 protocol / Federate AD FS 2.0 with CAS

as seen on Stack Overflow - Search for 'Stack Overflow'
I'am are trying to implement a Web SSO with claim based identity using WIF and AD FS 2.0 right now. Right now I have a existing ASP.Net application which delegates authentification to the AD FS 2.0 server and trust issued security tokens. That works just fine. However, in the organization there is… >>> More
SSO using WIF on UNIX/Mono

as seen on Stack Overflow - Search for 'Stack Overflow'
We have implemented SSO in a .NET web application using Windows Identity Foundation (WIF). It works great. However, we have to run it on a UNIX system using Mono. Is that possible? >>> More
WIF

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
Windows Identity Foundation (WIF) enables .NET developers to externalize identity logic from their application, improving developer productivity, enhancing application security, and enabling interoperability. It is a framework for implementing claims-based identity in your applications. With WIF one… >>> More
Integrating WIF with WCF Data Services

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
A time ago I discussed how a custom REST Starter kit interceptor could be used to parse a SAML token in the Http Authorization header and wrap that into a ClaimsPrincipal that the WCF services could use. The thing is that code was initially created for Geneva framework, so it got deprecated quickly… >>> More