实施ADFS 2.0 SSO后，使用C＃更新/处理Active Directory用户帐户

Question

Can I update/handle Active Directory user account using C# when ADFS 2.0 SSO is implemented?

Or once user get response from SSO ie token/fault do I need to access Active Directory using LDAP connection for checking user status and badpassword-answer count?

Answer 1

Once ADFS authenticates, you are into the token flow and redirect to RP and you don't get a chance to intercept so whatever custom code you want needs to come first.

Do all your AD stuff and then call the ADFS authentication.

Warning: ADFS 3,0 upwards does NOT use IIS so there is no upgrade path for this custom code.

Update :

in SubmitButton_Click in FormsSignIn:

Do your LDAP stuff then:

   try
   {
        SignIn( UsernameTextBox.Text, PasswordTextBox.Text );
   }


   catch ( AuthenticationFailedException ex )
   {
        // Check for lockout. password expired etc.
   }