Active and Passive Federation in WIF

Posted by user102533 on Stack Overflow See other posts from Stack Overflow or by user102533
Published on 2010-05-05T16:52:50Z Indexed on 2010/05/05 16:58 UTC
Read the original article Hit count: 1706

Filed under:

WIF

|

windows-identity-foundati

I am trying to understand the difference between Active and Passive federation in WIF. It appears that one would use an Active Federation if the Relying Party (RP) is a WCF Service instead of an ASP.NET application and a Passive Federation if the RP is an ASP.NET application. Is this accurate?

So, in a scenario in which an ASP.NET application uses a WCF in the backend, the MS articles suggest using a 'bootstrap' security token that is obtained by the ASP.NET app using an ActAs STS and this token is used to authenticate with the WCF. In this scenario, it appears that we are doing a combination of Active (user -> STS -> ASP.NET RP) and Passive (ASP.NET -> ActAs STS -> WCF) Federation?

© Stack Overflow or respective owner

Related posts about WIF

Book Review: Programming Windows Identity Foundation

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
Programming Windows Identity Foundation by Vittorio Bertocci is right now the only serious book about Windows Identity Foundation available. I started using Windows Identity Foundation when I made my first experiments on Windows Azure AppFabric Access Control Service. I wanted to generalize the… >>> More
WIF using SAML 2 protocol / Federate AD FS 2.0 with CAS

as seen on Stack Overflow - Search for 'Stack Overflow'
I'am are trying to implement a Web SSO with claim based identity using WIF and AD FS 2.0 right now. Right now I have a existing ASP.Net application which delegates authentification to the AD FS 2.0 server and trust issued security tokens. That works just fine. However, in the organization there is… >>> More
SSO using WIF on UNIX/Mono

as seen on Stack Overflow - Search for 'Stack Overflow'
We have implemented SSO in a .NET web application using Windows Identity Foundation (WIF). It works great. However, we have to run it on a UNIX system using Mono. Is that possible? >>> More
WIF

as seen on Geeks with Blogs - Search for 'Geeks with Blogs'
Windows Identity Foundation (WIF) enables .NET developers to externalize identity logic from their application, improving developer productivity, enhancing application security, and enabling interoperability. It is a framework for implementing claims-based identity in your applications. With WIF one… >>> More
Integrating WIF with WCF Data Services

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
A time ago I discussed how a custom REST Starter kit interceptor could be used to parse a SAML token in the Http Authorization header and wrap that into a ClaimsPrincipal that the WCF services could use. The thing is that code was initially created for Geneva framework, so it got deprecated quickly… >>> More

Related posts about windows-identity-foundati

SO-Aware at the Atlanta Connected Systems User Group

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
Today my colleague Don Demsak will be presenting a session about WCF management, testing and governance using SO-Aware and the SO-Aware Test Workbench at the Connected Systems User Group in Atlanta . Don is a very engaging speaker and has prepared some very cool demos based on lessons of real world… >>> More
We are hiring (take a minute to read this, is not another BS talk ;) )

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
I really wanted to wait until our new website was out to blog about this but I hope you can put up with the ugly website for a few more days J. Tellago keeps growing and, after a quick break at the beginning of the year, we are back in hiring mode J. We are currently expanding our teams in the United… >>> More
Tellago is still hiring….

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
Tellago 's SOA practice is rapidly growing and we are still hiring. In that sense, we are looking to for Connected Systems (WCF, BizTalk, WF) experts who are passionate about building game changing solutions with the latest Microsoft technologies. You will be working alongside technology gurus like… >>> More
Using a service registry that doesn’t suck part I: UDDI is dead

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
This is the first of a series of posts on which I am hoping to detail some of the most common SOA governance scenarios in the real world, their challenges and the approach we’ve taken to address them in SO-Aware. This series does not intend to be a marketing pitch about SO-Aware. Instead, I would… >>> More
Back from Teched US

as seen on ASP.net Weblogs - Search for 'ASP.net Weblogs'
It's been a few weeks since I last blogged and, trust me, I am not happy about it :( I have been crazily busy with some of our projects at Tellago which you are going to hear more about in the upcoming weeks :) I was so busy that I didn't even have time to blog about my sessions at Teched US last… >>> More