Tagged Questions
3
votes
1answer
95 views
What are the benefits of federated identity management over bare bones public key encryption?
What are the main reasons for having a federated identity system such as OpenID over having identities based purely on a public key?
OpenID uses an Identity Provider to confirm that a user owns a ...
10
votes
1answer
382 views
What encryption prevents the tampering of Windows Identity Foundation (WIF) FedAuth cookies?
It occurred to me that the WIF FedAuth cookies contain identity information, that if tampered with, could permit someone to assume the identity of another user. Fortunately, WIF does ...
13
votes
3answers
179 views
Are malicious relying parties able to abuse OpenID logins?
if I logon with OpenID into a website (crafted by attackers/hackers) I want to know how much damage can they do to me?
Are they able to steal my contact info, name, etc (assuming I'm using Gmail ...
3
votes
2answers
1k views
What is the exact difference between SAMLp and WS-Trust?
They seem to be similar on the surface, but I'm not sure how deep the differences are.
Can someone explain to me the difference between SAMLp and WS-Trust? ADFSv2 gives me a choice between these ...
0
votes
1answer
434 views
How can I decrypt ADFS-based SAML/p or WS-Trust claims?
I'd like to audit the claims that are sent to a client from a SAML/p or WS-Trust authentication.
What private keys do I need and how would I decrypt this information?
If it makes any difference, I'm ...
