Tagged Questions

4
votes
2answers
516 views

Are some STS token formats better than others (SAML vs SWT vs JWT)

I'm configuring an Azure ACS STS and would like to know if there is any impact on security based on the following token formats or how they are used. The corresponding help link takes me to MSDN ...
1
vote
1answer
145 views

How can a SAML Relying Party redirect to one of two IDPs?

We need to support the following Authentication flows User 1 logs into Salesforce using Salesforce Credentials User 2 logs into Salesforce using Arcot +Ping + Siteminder credentials User 2 logs into ...
4
votes
3answers
1k views

Can Central Authentication Service (CAS) do authorization?

I have a few web applications that I'm trying to tie in via CAS, but I'm a little confused about the authorization, which I read CAS isn't supposed to do. Yet, I see something like groups, but don't ...