single sign on - SAML IDP, ADFS 2.0 SP & WS-Fed Application -


update:

i able adfs forward user relying party application. used componentspace's saml2.0 library , relaystate. though forwards wif application, doesn't recognize user having been authenticated. instead initiates sp-initiated sso scenario redirecting idp sts. i'm not sure how should proceed.

original message:

i have configured single-sign-on setup in following manner:

idp - portal website posts saml2 responses sp.

sp - adfs 2.0 configured claims provider trust configured saml2.0 endpoint (with idp of course)

rp application - asp.net application configured relying party trust in adfs (ws-fed).

when log idp , click on link posts saml2 token adfs, works fine. taken idpinitiatedsignon.aspx page , told have been logged in. problem expect see drop down list of applications choose (which should include single rp application) see nothing. have 2 buttons allowing me sign out of applications or single application. there trick configuring rp application trust i'm not aware of? understanding adfs 2.0 accept configuration of saml2 , ws-fed. (see http://blogs.technet.com/b/askds/archive/2012/09/27/ad-fs-2-0-relaystate.aspx under "when can use relaystate?")

i appreciate advice on this.

idpinitiatedsignon shows list of rp's support saml.

your rp ws-fed won't appear in list. in case, path is:

rp -> ws-fed -> adfs (home realm discovery) -> saml -> idp -> authenticate.


Comments

Popular posts from this blog

java - Jmockit String final length method mocking Issue -

asp.net - Razor Page Hosted on IIS 6 Fails Every Morning -

c++ - wxwidget compiling on windows command prompt -