Tagged Questions

4
votes
2answers
539 views

Are some STS token formats better than others (SAML vs SWT vs JWT)

I'm configuring an Azure ACS STS and would like to know if there is any impact on security based on the following token formats or how they are used. The corresponding help link takes me to MSDN ...
1
vote
1answer
194 views

What risk can untrusted WS-Federation metadata pose?

I'm adding support for SAML/ADFS/Azure ACS and read that untrusted metadata poses a risk. Considering that ADFS does background refreshes of the metadata, as do some RPs, can someone explain the ...