Can I login to ADFS without redirecting to the login page of ADFS ?

[Rutul Saraiya]

I have setup simplesamlphp in my system. Now I need following things

1. Is there any test ADFS server available where I can get the metafile and check the authentication of ADFS ?

2. Can I login to ADFS server from my system instead of redirecting it to the ADFS login page ?

The problem is I am using Angular as a frontend and as backend I am using CakePHP now my server requests happens using Webservice. So if I will do authentication using ADFS redirection then I have to do many changes in my normal login AngularJs - CakePHP webservice. 

Can anyone suggest ADFS authentication without redirection

Thanks in advance

[Peter Schober]

* Rutul Saraiya <rutul...@gmail.com> [2018-09-06 11:28]:

> I have setup simplesamlphp in my system. Now I need following things
>
> 1. Is there any test ADFS server available where I can get the
> metafile and check the authentication of ADFS ?
> 2. Can I login to ADFS server from my system instead of redirecting
> it to the ADFS login page ?

I don't know what these mean specifically but this is not a MS-ADFS
forum so your chances of getting answers will be much better asking
that someplace specific to that Microsoft product.

> The problem is I am using Angular as a frontend and as backend I am
> using CakePHP now my server requests happens using Webservice.
> So if I will do authentication using ADFS redirection then I have to
> do many changes in my normal login AngularJs - CakePHP webservice.
>
> Can anyone suggest ADFS authentication without redirection

I don't claim to understand any of what you wrote above (how is
authentication supposed to work "before ADFS"), but if you're relying
on protocols that require HTTP redirects (such as the bindings used as
part of the SAML Web SSO Profile; probably similar things exist for
the WS-* family of protocols) then (full browser) redirects will need
to happen, I guess. So during these exchanges of protocol messages the
browser will move away from your Angular application and re-load it
once returned.

Now one question is how would "ADFS" or anything else on the server,
including SimpleSAMLphp, protect a JavaScript application that runs
purely in the web browser (Angular)?

-peter