I am working on a tablet application and have come across an interesting issue.

We have a domain joined tablet that runs a Windows Store Application. We already have user identity and we need to call a web service endpoint that is secured with SAML.

Do I need to hit IDP to get a SAML token and pass that with my web service calls? Or would an identity object be enough to get my callers identity context?

The web service is a SAP service, that only accepts SAML.


It doesn't matter that you have the identity unless you are a trusted idp for the service that's protecting its resource with SAML. That said, if you have a SAML response from an idp that the service trusts, then you should be able to post that to them as an sso token.

  • Thanks jbd. I understand that once I am able to connect to Idp i will be able to POST. My concern is that if i can create a SAML token out of a kerberos token that i get after user gets authenticated on AD ? Apr 25 '16 at 23:45

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.