wcf - Federated security, Single Sign On and security token sharing -


in single sign on (sso) scenario if applications running in same domain/company,

  1. is same security token shared among applications (relying parties) users authenticated same common identity provider / security token service? default behavior of sts? e.g. user logs on application x. after time, tries access application y. since authenticated same sts , if token issued still not expired, won't have provide credentials while accessing application y.
  2. my understanding may possible if token contains claims required relying parties / applications. practice?
  3. can token's (which issued when user logged on application x) expiry time extended/reset when user connects application y?

wif implies adfs usually,

  1. yes long rp using same sts.

  2. no - in adfs, each rp has own claims configuration. token produced different (although copy configuration if wanted).

  3. in wif, yes. need use "sliding token" mechanism.


Comments

Popular posts from this blog

networking - Vagrant-provisioned VirtualBox VM is not reachable from Ubuntu host -

c# - ASP.NET Core - There is already an object named 'AspNetRoles' in the database -

ruby on rails - ArgumentError: Missing host to link to! Please provide the :host parameter, set default_url_options[:host], or set :only_path to true -