1

Is it possible to make make ADFS to authenticate a user against an ASP.NET Membership database in SQL Server? Alternatively can a .NET C# plug-in be created and installed in ADFS which could provide this "service" to ADFS?

Dhwanil Shah
  • 1,072
  • 1
  • 9
  • 25

3 Answers3

1

As far as I know this is not possible. ADFS (v1 and v2) ONLY supports an AD Domain Controller as the Authentication source of users. Other flavors of AD do not work (ADAM/AD LDS).

There are other options that are easier to deploy and give you IP-STS (aka IDP) functionality. For example, our PingFederate product can leverage your SQL Server pretty easily if you are interested.

Ian
  • 4,227
  • 18
  • 19
1

No, this is not possible. See this answer of mine for the official documentation at this point, and for an alternative solution involving a custom STS.

Community
  • 1
  • 1
MarnixKlooster ReinstateMonica
  • 9,640
  • 14
  • 54
  • 108
1

A lot of issues with ADFS can be worked around by federating ADFS with another STS and adding the required functionality to the STS.

StarterSTS is a good example of an STS that authenticates against an instance of a SQL Server aspnetdb database.

rbrayb
  • 46,440
  • 34
  • 114
  • 174