Integration AD Identity x Azure AD x ADFS

0

I have an application with database authentication using OWIN and Identity. One customer requested single sign on with ADFS on premisse. I did it directly through OWIN, but the client requests a federation url (with metadata), which I do not own. To get around, I think of authenticating with Azure AD with the least possible effort (I thought I'd use the ldap library and just check if the user exists) and Azure AD configure SSO.

Is this scenario valid?

    
asked by anonymous 10.04.2018 / 14:19

1 answer

0

IdentityServer will be your best way out. It will provide you with all possible and necessary means of accreditation.

It supports several forms of authentication:

  • Windows integrated authentication: If you are running on a Windows Server running IIS and within an AD domain.
  • Username / password: via LDAP and federation (with OpenID Connect / ADFS or domain next to IdentityServer)

And with it you will create SSO (Single Sign On) for how many applications you need, using user level or app level credentials.

    
12.04.2018 / 09:19