简体   繁体   中英

Geneva Server STS

我的要求是分配给用户的声明是公司已知的,例如,用户1:是公司1的产品经理的发布者,但同一用户仅是公司B的编辑者。这可以通过Geneva Server还是其他代码需求来实现被编写为重写类。

In my opinion it's the relying party itself should be making decisions on what roles to attach to a token based upon the identity itself.

However you can set rules based on individual relying parties and choose to serve information as a claim based on whatever the backing store says. Now how you represent that information in whatever backing store you are using (AD, LDAP, SQL, whatever) is a design decision at your end. You may also want to look at harnessing the claims transformation language in beta 2.

It's really hard to give any specific advice without knowing details about where your claim backing store is going to be and why you think you need to go this route.

The technical post webpages of this site follow the CC BY-SA 4.0 protocol. If you need to reprint, please indicate the site URL or the original address.Any question please contact:yoyou2525@163.com.

 
粤ICP备18138465号  © 2020-2024 STACKOOM.COM