single sign on - SAML IDP, ADFS 2.0 SP & WS-Fed Application -
update:
i able adfs forward user relying party application. used componentspace's saml2.0 library , relaystate. though forwards wif application, doesn't recognize user having been authenticated. instead initiates sp-initiated sso scenario redirecting idp sts. i'm not sure how should proceed.
original message:
i have configured single-sign-on setup in following manner:
idp - portal website posts saml2 responses sp.
sp - adfs 2.0 configured claims provider trust configured saml2.0 endpoint (with idp of course)
rp application - asp.net application configured relying party trust in adfs (ws-fed).
when log idp , click on link posts saml2 token adfs, works fine. taken idpinitiatedsignon.aspx page , told have been logged in. problem expect see drop down list of applications choose (which should include single rp application) see nothing. have 2 buttons allowing me sign out of applications or single application. there trick configuring rp application trust i'm not aware of? understanding adfs 2.0 accept configuration of saml2 , ws-fed. (see http://blogs.technet.com/b/askds/archive/2012/09/27/ad-fs-2-0-relaystate.aspx under "when can use relaystate?")
i appreciate advice on this.
idpinitiatedsignon shows list of rp's support saml.
your rp ws-fed won't appear in list. in case, path is:
rp -> ws-fed -> adfs (home realm discovery) -> saml -> idp -> authenticate.
Comments
Post a Comment