wcf - Federated security, Single Sign On and security token sharing -


in single sign on (sso) scenario if applications running in same domain/company,

  1. is same security token shared among applications (relying parties) users authenticated same common identity provider / security token service? default behavior of sts? e.g. user logs on application x. after time, tries access application y. since authenticated same sts , if token issued still not expired, won't have provide credentials while accessing application y.
  2. my understanding may possible if token contains claims required relying parties / applications. practice?
  3. can token's (which issued when user logged on application x) expiry time extended/reset when user connects application y?

wif implies adfs usually,

  1. yes long rp using same sts.

  2. no - in adfs, each rp has own claims configuration. token produced different (although copy configuration if wanted).

  3. in wif, yes. need use "sliding token" mechanism.


Comments

Popular posts from this blog

how to add preprocess loader in webpack 2 -

go - serving up pdfs using golang -

python - django admin: changing the way a field (w/ relationship to another model) is submitted on a form so that it can be submitted multiple times -