wcf - Federated security, Single Sign On and security token sharing -
in single sign on (sso) scenario if applications running in same domain/company,
- is same security token shared among applications (relying parties) users authenticated same common identity provider / security token service? default behavior of sts? e.g. user logs on application x. after time, tries access application y. since authenticated same sts , if token issued still not expired, won't have provide credentials while accessing application y.
- my understanding may possible if token contains claims required relying parties / applications. practice?
- can token's (which issued when user logged on application x) expiry time extended/reset when user connects application y?
wif implies adfs usually,
yes long rp using same sts.
no - in adfs, each rp has own claims configuration. token produced different (although copy configuration if wanted).
in wif, yes. need use "sliding token" mechanism.
Comments
Post a Comment