Tag Info

New answers tagged

0

The metadata file doesn't have any sensitive information in it. It provides information that the SP can use to trust an assertion coming from [IdP] (so no one else can claim to be [IdP]). The typical information it contains are: SSO URL, issuer name, and the certificate containing the PKI "public" key. All of these are pretty much public anyway (as any user ...


0

The Web Application Proxy uses an authorization token to decide whether or not it sets the EdgeAccessCookie. If you can request the authorization token and put it in the URL of your HTTPRequest, the WAP will let you pass. Code snippets: List<KeyValuePair<string, string>> postData = new List<KeyValuePair<string, string>>(); ...


0

How exactly is the second step blocked by the ADFS proxy? The proxy should only be blocking ADFS calls, not calls to your service. Since your calls to obtain the token work properly, I'd say the setup works as it should ADFS-wise. Where things go screwy is in the configuration of the service you're protecting. By any chance did you run your service through ...



Top 50 recent answers are included