Username/passwd authentication in ADFS through WIF

Question

I'm building a REST web service mobile apps authentication - take username and password, authenticate in ADFS (preferably through WIF if possible) and returns the SAML (2.0) token back to caller. It's used for authorization in later calls. I found many guides and blog posts about authentication through WIF in web apps and authorization in WCF when the token is passed in call but I haven't found any clue how to approach this scenario. Any suggestions how to start?

Answer 1

What is your mobile client built on? If you can use WIF (as in have the .NET platform available), then WSTrustChannel is your friend.

Note: with REST services you often use lighter-weight token formats, like JWT. This is what Azure Mobile Services uses as an example.

Answer 2

您可以使用IdentityServer在WS-Trust世界和OAuth2 / JWT之间进行中介-参见此处： http ://brockallen.com/2013/04/14/getting-json-web-tokens-jwts-from-adfs-via- thinktecture-identityservers-adfs-integration /