WIF application

[Gilbert, Alistair]

Hi,
Thank-you everyone for the responses.

The replies were what I was expecting to be honest.

WIF is none optional at this stage.

I believe my safest option (easiest for me) is to have an ADFS farm (STS) with a public proxy layer integrating with the application as a relay station and then have all the IdPs set up as claims providers.
This was always my plan b, I didn't want to go off and order a load of tin.

I am going to read more into the documentation on this, so no need for any indepth explanation, but just to save me from reading a lot of stuff just to find out it is not possible could I ask one final question:
Is it possible to configure Shib IdP to act as an STS in the same way ADFS does, by that I mean configure it so that I can configure my WIF application (using the SAML2 support for WIF) to point at the Shib IdP but then have the Shib IdP be able to propagate the request down other IdPs?

Best regards,
Alistair Gilbert

-----Original Message-----
From: users-bounces at shibboleth.net [mailto:users-bounces at shibboleth.net] On Behalf Of John W Mikhael
Sent: 09 October 2012 21:05
To: users at shibboleth.net
Subject: Re: WIF application

Out of the box, the WIF API's can only speak WS-Federation, so it cannot directly integrate with Shibboleth SP, it required a WS-Federation STS (e.g.
ADFS) instead. The extension suggested by Nate is a great solution, but we haven't seen any progress on this CTP for a long time.

Unless you have a very specific scenario that requires using WIF, Shibboleth SP by itself will cover all your SSO and identity federation use cases, and will easily secure your ASP.NET app and link to all your ADFS and Shibboleth IdP's.

If it's a must to use WIF, then you won't need Shibboleth SP, but you will need to add one ADFS server to act as a protocol gateway between your web app and the Shibboleth IdP's.



--
View this message in context: http://shibboleth.1660669.n2.nabble.com/WIF-application-tp7582366p7582382.html
Sent from the Shibboleth - Users mailing list archive at Nabble.com.
--
To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net