1
votes

We are planning to provide single sign on to our set off .NET applications(Web and windows) using ADFS 2.0, ACS and WIF. I am quite new to these technologies.

I have seen quite few videos on channel 9, most of them are giving SSO using google, yahoo facebook. Would appreciate if you can provide step by step process to configure ADFS with ACS.

Is it possible to call ADFS and ACS from WCF? We are planning to have WCF which will collaborate with ADFS and ACS and issue SAML to token to our set of applications. So it’s like our application will call WCF for authentication with required credential, WCF will then call ADFS to get IdPToken, that IdpToken will then send to ACS to get SAML token, and returned SAML token will then forwarded to application. I tried to search set of examples for this but could not find. Some guidance or link will be useful.

Also it required to ADFS available to internet? Do we have to expose it to public domain?

2

2 Answers

3
votes

There's an excellent ACS - WIF guide over on the Technet Wiki Windows Identity Foundation (WIF) and Azure AppFabric Access Control Service (ACS) Content Map.

MSDN ACS 2.0

ACS 2.0 Samples and Documentation. This has ACS / WCF samples

Identity Developer Training Kit This has ADFS / WCF samples.

If you want external users to authenticate using ADFS then yes it has to be available to the Internet. However, you can install an ADFS Proxy Server in the DMZ and then put the real instance of ADFS behind a firewall.

0
votes

You might find step by step guides in white papers (en anglais == In English) from http://www.microsoft.com/france/interop/ressources/documents.aspx In particular, I think of Step-by-Step Guide: Federated Collaboration with Shibboleth 2.0 and SharePoint 2010 technologies Livre blanc « Guide étape-par-étape Collaboration fédérée avec Shibboleth 2.0 et SharePoint 2010 » (en anglais)

For ACS, you might want to go to Wade Wegner's (www.wadewegner.com) blog or Vittorio Bertocci's blog (blogs.msdn.com/b/vbertocci/) I also have a few posts at http://blogs.msdn.com/b/benjguin/archive/tags/identityfederation/

regards