Auto sign on with Windows Authentication

Question

I am to be having a lot of problems, misinformation and confusion when attempting to find out the plausibility and viability of attempting this.

The requirement is for a remote client, accessing our website to be auto signed in with their Active Directory User account. We have the option to setup a WCF service (or something similar) on their remote server for authentication purposes. Which from my little understanding is how this problem will be tackled.

So, my question after a little background is this.

CAN this be done, and HOW can it be done?

Answer 1

Instead of hosting a WCF service on their domain, I would look into installing ADFS on their domain.

You can change your website to accept security tokens from ADFS using the WS-Federation protocol. You can use classes from the System.IdentityModel namespace for that. An example of how to implement this in ASP.NET can be found here .

An alternative would be to use Azure Active Directory as your identity provider and have your client sync accounts to their AAD directory (or federate between AAD and ADFS). An example can be found here .