Questions tagged [identity-delegation]
14 questions
10
votes
1 answer
Federated vs. Delegated, OAuth vs OpenID Connect vs SAML
I am trying to understand differences between Federated Authentication and Delegated Authentication, But I am getting more and more confused.
Do we use SAML protocol ALWAYS for Federated Authentication? or What?
Is it possible to use OpenID Connect…
user217648
- 3,338
- 9
- 37
- 61
5
votes
1 answer
Change the context of a thread to other user
A user triggers a event, thus the thread is in the context of said user.
I iterate over all connected users and want to send them this event, but I want to use classic Authorization to determine if they should receive the event. Problem is the…
Anders
- 17,306
- 10
- 76
- 144
3
votes
1 answer
Delegation of WebApp user (Windows auth) to MVC Web API failing
We have an IIS 7.5 with the following site structure:
WebApp (ASP.NET Forms) = Web Site (http://WebApp)
WebAPI (MVC 4 Web API) = Folder converted to Application (http://WebApp/webapi)
Both are running under the same ApplicationPool.
Both have the…
Erwin
- 3,060
- 26
- 24
2
votes
0 answers
ASP.NET impersonation is prompting for login
I have an application with Windows authentication enabled and it works fine. There is a new functionality that calls a web service, and I want to carry the user credentials to that web service as well, so I have enabled impersonation hoping that…
vtortola
- 34,709
- 29
- 161
- 263
2
votes
1 answer
WCF Double Hop Localhost Losing Impersonation on Second Hop
I've seen a lot of posts about the WCF double-hop issue with impersonation, but none of them have specifically helped me resolve my problem.
What am I missing? What else do I need to do in order to retain my Impersonated User (DOMAIN\UserName) over…
chrisriesgo
- 248
- 2
- 13
2
votes
1 answer
How to delegate Facebook SecurityToken to WCF service
I have the following components:
WPF Application,
Identity Server,
WCF Web Service,
WPF Application uses WebBrowser control to authenticate using Thintecture Identity Server using WS-Federation. Identity Server has enabled Home Realm Discovery and…
zielu1
- 1,308
- 11
- 17
1
vote
0 answers
Openid Connect bearer token sharing with reduced privilleges set
As I understand, after application A has achieved bearer token, it can share it with client B. But what if client A wants to share token with reduced set of permissions from those that are delegated to it.
For example: I have server that hosts…
Dmitry Dmitriy
- 93
- 6
1
vote
0 answers
Getting a new ADFS token to log-on Office 365 from the bootstraptoken
I'm trying to achieve this scenario (I'm developing the SharePoint Web part in C#, server-side):
i.e. I'm aiming at delegating the credentials of the initial user (connecting to SharePoint) to a back-end system made of an Exchange Online (Office…
Evariste
- 175
- 1
- 7
1
vote
0 answers
WCF Service: Client Principal Delegation between WebServices
I'm currently developing a website which uses multiple WCF-WebServices.
Delegation and Impersonation haven't been a problem yet.
Now I have the following scenario:
WebSite --> WebService1 --> Validation-WebService
My Website calls the WebService1…
sternze
- 1,524
- 2
- 9
- 15
1
vote
2 answers
WCF Delegation, Service couldn't access SQL Server
I have the following infrastructure:
Computer #1, Microsoft SQL Server 2008, started under System account. There is login Master\MyLogin (with Windows Authintification), server roles = sysadm, database role = db_owner.
Computer # 2, WCF service on…
Sir Hally
- 2,318
- 3
- 31
- 48
1
vote
1 answer
Is identity delegation via WS-Trust/ActAs supported in ACS?
I'm just getting started with claims-based security and have a question related to identity delegation. I've managed to set up a local dummy STS and a couple of WCF services that relies on it for authentication. A web application authenticates the…
Anders Fjeldstad
- 10,724
- 2
- 33
- 50
0
votes
0 answers
How enable impersonation in server farm for a ASP.NET Core app
We have multiple server machines with web server and databases. On web server W, there is an ASP.NET Core app (the app runs in IIS with a service user GMSA). The database is on a different machine (server name is D). The security configuration of…
Alois
- 361
- 2
- 18
0
votes
1 answer
Impersonization fails in a web application when accessed from remote computer
I have a web application which is configured to run under NTLM scheme.
From the web application I am accessing a service in application server.
I am impersonating the user in the web application code which accesses the service in application…
Vijay
- 513
- 1
- 6
- 16
0
votes
2 answers
Kerberos delegation and port-specific SPNs
I have a system in which I use Kerberos with simple delegation to have an AD user's credentials forwarded from a website to a downstream HTTP REST service using integrated Windows authentication. All servers are Windows Server 2012 R2.
This works…
stames
- 1,250
- 1
- 10
- 16