Re: ADFS and Classic ASP

I suppose you could ask that here. :) I'm not sure if there is a perfect
group for ADFS yet.

ADFS has two supported methods for app integration:
Claims-aware
Windows token

Claims-aware apps are the most flexible, but you are limited not only to
..NET apps but those that use .NET 2.0+ so that won't work for you.

Windows token-integrated apps will support basically anything that runs on
IIS including classic ASP, but the app has to be designed essentially to
work with Windows security. The web server must be a domain member of the
same forest the resource ADFS server is in. If the app is designed to use
integrated Windows auth (or Basic) right now and authenticates domain users,
then this integration should not be difficult. If the app uses a custom
authentication mechanism like forms auth, then this will likely be more
tricky.

I'm not sure what the best documents to look at are for ADFS app integration
just yet. Keith Brown had a pretty decent high level overview in MSDN
magazine a while ago.

I know all the nuts and bolts and can answer all sorts of specific questions
if you post back here. We also host a forum on ADFS at
www.directoryprogramming.net, but I'm not really picky as to what discussion
forum you use.

HTH,

Joe K.

--
Joe Kaplan-MS MVP Directory Services Programming
Co-author of "The .NET Developer's Guide to Directory Services Programming"
http://www.directoryprogramming.net
--
"Robert Thompson" <RobertThompson@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:F980AC08-F9CF-4143-B40C-1CE907579D6F@xxxxxxxxxxxxxxxx
Not sure if this is the correct newsgroup but I'm looking at ADFS as a way
to
provide SSO to multiple web based applications over the Internet.
Unfortunately, one of the apps was written in classic ASP and is too big
to
change any time soon.

Can ADFS support classic ASP as well as .NET based applications? Are there
any special concerns or issues?

Any quick advice or URL to a whitepaper that addesses classic ASP would be
appreciated.

Thanks.

--
RT



.

Relevant Pages

  • Re: ADFS June 2006 Step-by-step guide
    ... Under ADFS, the app needs to be set to anonymous ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS June 2006 Step-by-step guide
    ... alansh@xxxxxxxxxx in the resource forest. ... ADFS to map to a specific user in your forest or if you want a token based ... The claims app will help you debug all this stuff and the quick start sample ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS - SAML audience
    ... When you log into an app ... into a different ADFS app, it will redirect you back to the FS. ... case, since you have a logon cookie from the FS, you SSO into the FS and it ... If you were doing a pure "inside the firewall" web SSO with a set of web ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS and authorization
    ... However, if your app needs a ticket with a specific claim, the app needs to ... mapping of federation users to Windows tokens can be painful. ... Raw claims gives you the most power, but couples you directly to the ADFS ... authorization framework that can benefit from the additional abstraction. ...
    (microsoft.public.windows.server.active_directory)
  • Re: ADFS and authorization
    ... However, if your app needs a ticket with a specific claim, the app needs to ... mapping of federation users to Windows tokens can be painful. ... Raw claims gives you the most power, but couples you directly to the ADFS ... authorization framework that can benefit from the additional abstraction. ...
    (microsoft.public.windows.server.active_directory)