Shibboleth SP and IIS authentication

[Randy Wiemer]

ADFS is like Shibboleth in that it does not produce a Windows server security context equivalent to the IIS Windows Integrated Auth.  This in-memory context contains the SIDs of the user and the security groups the user is a member of and the SID histories and is used by Windows to control access to resources that are ACL'd with SIDs (among other things). There is a Windows service called the C2WTS - Claims to Windows Token Service that constructs a true windows login based on assertions.  This C2WTS is fairly easy to use with ADFS.  I do not know how hard it would be to adapt it to a Shibboleth SP.

Randy

 
> Date: Fri, 19 Jul 2013 10:41:36 -0700
> From: david.tello at whitebearsolutions.com
> To: users at shibboleth.net
> Subject: RE: Shibboleth SP and IIS authentication
> 
> ooooohhh shit....
> 
> I was afraid that it wouldn't be possible. I must to study use ADFS, but i
> didn't want. Thanks for your reply Scott!!
> 
> 
> 
> 
> --
> View this message in context: http://shibboleth.1660669.n2.nabble.com/Shibboleth-SP-and-IIS-authentication-tp7588646p7588658.html
> Sent from the Shibboleth - Users mailing list archive at Nabble.com.
> --
> To unsubscribe from this list send an email to users-unsubscribe at shibboleth.net

 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://shibboleth.net/pipermail/users/attachments/20130719/1dfac3d1/attachment.html