accesscontrolservice

How to pass required claims to OpenID identity provider with Azure ACS?

由 为君一笑 提交于 2019-12-20 11:13:11
问题 When looking at the request urls that Azure ACS generates I can see that ACS includes email, fullname, firstname and lastname as required claims. Further, the fullname attribute is mapped to the http://axschema.org/namePerson claim type. Now I have added MyOpenID as an Identity Provider. MyOpenID does not recognize the axschema claim, but I have successfully retrieved http://schema.openid.net/namePerson from MyOpenID. The problem is though, even if I add the http://schema.openid.net

MVC3 site using Azure ACS & ADFS continually prompts for credentials when using Firefox and Chrome

由 只愿长相守 提交于 2019-12-20 10:58:38
问题 I've created a basic MVC 3 website that's using Windows Azure's Access Control Service (ACS) to perform user authentication against an Active Directory Federated Service (ADFS) endpoint. I followed the "Add STS Reference" wizard and the site runs fine and authenticates users just perfectly in IE. However, when I use Chrome or Firefox it continually prompts for my credentials over and over again. I found this post on technet that mentions the issue as it pertains to Firefox but there's no fix

OAuth 2.0 Identity Providers in Windows Azure AppFabric Access Control Service (ACS)

由 試著忘記壹切 提交于 2019-12-06 02:49:09
问题 OAuth 2.0 delegation is included within the Azure AppFabric Access Control Service: http://blogs.objectsharp.com/cs/blogs/steve/archive/2011/04/11/windows-azure-access-control-services-v2-rtw.aspx But how do you actually set up an OAuth 2.0 identity provider? In the management interface when you add an Identity Provider and select WS-Federation identity provider, you need to provide a WS-Federation metadata document. However, when you read the documentation of OAuth 2.0 providers (i.e. http:/

Is it possible to use active federation with the Azure Access Control Service?

由 こ雲淡風輕ζ 提交于 2019-12-04 18:11:36
The Windows Azure Access Control Service (ACS) enables federated authentication, but all the examples I've seen has been of passive federation (browser-based applications authenticating via a sequence of HTTP redirects and scripted HTTP posts). Does the ACS support active federation ? In other words: assume that we have a rich client like a WPF or Silverlight application that accesses a web service. Is it possible to use the ACS as an STS in this scenario? Yes, this is possible. If you check the examples in the excellent Identity Training Kit or at acs.codeplex.com, you are interested in

Add STS reference gives error: “The security token service descriptor does not contain any key descriptors”

由 限于喜欢 提交于 2019-12-02 10:56:25
问题 When adding an STS reference, I input the my windows azure federation metadata URL and it gives me the error in the title. It works if I create a new namespace, but a lot of stuff is configured on the current namespace, so I can't delete it. 回答1: So for anyone that would get this error, it's a simple fix. You need a X.509 certificate configured as primary in your ACS namespace. To do this you go under your acs configurations, in certificates and keys then you add a X.509 by uploading a .pfx

Add STS reference gives error: “The security token service descriptor does not contain any key descriptors”

由 两盒软妹~` 提交于 2019-12-02 03:27:42
When adding an STS reference, I input the my windows azure federation metadata URL and it gives me the error in the title. It works if I create a new namespace, but a lot of stuff is configured on the current namespace, so I can't delete it. So for anyone that would get this error, it's a simple fix. You need a X.509 certificate configured as primary in your ACS namespace. To do this you go under your acs configurations, in certificates and keys then you add a X.509 by uploading a .pfx file to the server and entering the password. You might also need a symmetric key also set as primary

Several Azure AD. New-MsolServicePrincipal : Access Denied

由 微笑、不失礼 提交于 2019-12-01 11:00:28
I want to set my Azure Active Directory as an identity provider for SharePoint 2013 Foundation. I activated Azure trial from account that is a part of another infrastructure (my company's infrastructure). So what i have now: Azure VM with SharePoint 2013 Foundation installed. Created by me for testing purposes Azure Active Directory that is a part of my company's infrastructure. I don't have any permissions even to view it. But I see it since my company uses it Azure Active Directory with me as Global Admin (my-ad-name). Created by me for testing purposes Access Control Services. Created by me

Several Azure AD. New-MsolServicePrincipal : Access Denied

由 馋奶兔 提交于 2019-12-01 09:22:50
问题 I want to set my Azure Active Directory as an identity provider for SharePoint 2013 Foundation. I activated Azure trial from account that is a part of another infrastructure (my company's infrastructure). So what i have now: Azure VM with SharePoint 2013 Foundation installed. Created by me for testing purposes Azure Active Directory that is a part of my company's infrastructure. I don't have any permissions even to view it. But I see it since my company uses it Azure Active Directory with me

Add STS reference gives error: “The security token service descriptor does not contain any key descriptors”

由 回眸只為那壹抹淺笑 提交于 2019-11-30 10:02:10
问题 When adding an STS reference, I input the my windows azure federation metadata URL and it gives me the error in the title. It works if I create a new namespace, but a lot of stuff is configured on the current namespace, so I can't delete it. 回答1: So for anyone that would get this error, it's a simple fix. You need a X.509 certificate configured as primary in your ACS namespace. To do this you go under your acs configurations, in certificates and keys then you add a X.509 by uploading a .pfx
订阅 accesscontrolservice