ADFS and OAuth 2.0

[sferrise]

Hello,

I was wondering if anyone had done work to use ADFS as the identity
provider and use DotNetOpenAuth to manage the authorization.

The documentation seems to be in flux, so if there are any samples or
articles someone can point me to, that would be most helpful.

Thanks,

Sam

[Andrew Arnott]

I have done it.  Since authorization and authentication is orthogonal, it's actually as straightforward as the two pieces separately.  Just build a DNOA authorization server, which uses ADFS for user authentication.

--
You received this message because you are subscribed to the Google Groups "DotNetOpenAuth" group.
To post to this group, send email to dotnet...@googlegroups.com.
To unsubscribe from this group, send email to dotnetopenid...@googlegroups.com.
For more options, visit this group at http://groups.google.com/group/dotnetopenid?hl=en.

--
--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

[sferrise]

If I look at the OAuthAuthorizationServer sample, this follows that
model, except instead of using an OpenId provider WIF is used?

The key for me is to use active federation with ADFS due to some other
constraints which I think is where I am getting tripped up.

On May 4, 2:01 pm, Andrew Arnott <andrewarn...@gmail.com> wrote:
> I have done it.  Since authorization and authentication is orthogonal, it's
> actually as straightforward as the two pieces separately.  Just build a
> DNOA authorization server, which uses ADFS for user authentication.
>
>
>
>
>
>
>
>
>
> On Friday, May 4, 2012, sferrise wrote:
> > Hello,
>
> > I was wondering if anyone had done work to use ADFS as the identity
> > provider and use DotNetOpenAuth to manage the authorization.
>
> > The documentation seems to be in flux, so if there are any samples or
> > articles someone can point me to, that would be most helpful.
>
> > Thanks,
>
> > Sam
>
> > --
> > You received this message because you are subscribed to the Google Groups
> > "DotNetOpenAuth" group.

> > To post to this group, send email to dotnet...@googlegroups.com<javascript:;>
> > .

> > To unsubscribe from this group, send email to

> > dotnetopenid...@googlegroups.com <javascript:;>.

[Andrew Arnott]

Yes, that sounds about right.

--
Andrew Arnott
"I [may] not agree with what you have to say, but I'll defend to the death your right to say it." - S. G. Tallentyre

To post to this group, send email to dotnet...@googlegroups.com.
To unsubscribe from this group, send email to dotnetopenid...@googlegroups.com.

[sferrise]

Thanks - I'll give that a shot; appreciate the response.

Sam

[Jorge Silva]

Hey,

Out of curiosity, why dont you just use WIF + ADFS 2?

I used ADFS 2(proxy + full featured behind the firewall) and implemented a WIF website with passive auth and actas for WCF services.


What does DNOA brings to the table so its more viable than what i said?


Thanks,
Jorge