本地WebApi不重定向到身份验证

Question

For some reason OWIN is not redirecting to the login page especified in ADFS, i dont have any control over ADFS(Windows Server 2012), i followed the Microsoft Documentation( http://www.asp.net/visual-studio/overview/2013/creating-web-projects-in-visual-studio#orgauthonprem ) but im now stuck. I thought that by refering the metadata everything would be configured out of the box.

My Controller(template generated from WebApi)

[Authorize]
public class ValuesController : ApiController
{
    // GET api/values
    public IEnumerable<string> Get()
    {
        return new string[] { "value1", "value2" };
    }

    // GET api/values/5
    public string Get(int id)
    {
        return "value";
    }

    // POST api/values
    public void Post([FromBody]string value)
    {
    }

    // PUT api/values/5
    public void Put(int id, [FromBody]string value)
    {
    }

    // DELETE api/values/5
    public void Delete(int id)
    {
    }
}

However i get

This XML file does not appear to have any style information associated with it. The document tree is shown below.
<Error>
<Message>Authorization has been denied for this request.</Message>
</Error>

Am i supposed to implement some kind of based authentication?

UPDATE!
It seems it was necessary Microsoft.Owin.Security.WsFederation
However now adfs doesnt redirect to my realm, i get a 302 from ADFS after the user was authenticated.. Something like

/adfs/ls/?wtrealm=http%3a%2f%2flocalhost%3a554&wctx=WsFedOwinState%3d9C7kwsHRjBM86yrii5niUWF1gW9VFvCKBTj_D3z4-QQ5P25opteVK0mWf0fudEQdsgIexkHxTxhKDqBmfSWNAuJ3togHTBE40CEKYa8JLKJOxsgxNGIreYBOzNYzK8NNvR26PCMCowCFoM9NGJOC8w&wa=wsignin1.0

My Startup.cs

public partial class Startup
{
    // For more information on configuring authentication, please visit http://go.microsoft.com/fwlink/?LinkId=301864
    public void ConfigureAuth(IAppBuilder app)
    {
        app.SetDefaultSignInAsAuthenticationType(WsFederationAuthenticationDefaults.AuthenticationType);

        app.UseWsFederationAuthentication(new WsFederationAuthenticationOptions
        {
            MetadataAddress = ConfigurationManager.AppSettings["ida:AdfsMetadataEndpoint"],
            Wtrealm = ConfigurationManager.AppSettings["ida:Audience"],
        });
        app.UseCookieAuthentication(new CookieAuthenticationOptions
        {
            AuthenticationType = WsFederationAuthenticationDefaults.AuthenticationType
        });
    }
}

How can i tell ADFS to redirect to the realm?

Answer 1

事实证明，ADFS需要一个具有唯一ID的依赖方来验证用户并正确重定向到该领域。