Secure java based web services or web application using ADFS SAML 2.0

Question

  Case 1 : I have created the java based Web application

We have a need to secure the Java Web Application using ADFS as the Identity/Claims Provider. How do we get this done?

Case 2 : I have created the REST or SOAP based Java Web Service

We have a Soap Service that also needs to be secured with ADFS as the identity provider

We have a REST Service that also needs to be secured with ADFS as the identity provider

 

Thanks for quick response.

Answer 1

The purpose of this forum is to support the Open Specifications documentation. You can read about the Microsoft Open Specifications program here,http://www.microsoft.com/openspecifications/en/us/default.aspx
The library of Open Specification documents is located here, http://msdn.microsoft.com/en-us/library/dd208104(PROT.10).aspx

 

It is not clear from your post if you’re developing code to implement a protocol required for single sign-on, or providing single sign-on support within a web application.  Can you explain more.

---

Bryan S. Burgin Senior Escalation Engineer Microsoft Protocol Open Specifications Team

Answer 2

Bryan,

Our idea is to make Java web service claims aware and authenticate using ADFS as the Claims/ Identity provider.

Questions

-------------

 How do we get a Java web services to be Claims aware?   

How do we get a Java web service authenticated using the SAML tokens from ADFS?  

How do we add a Java web service as the relying party in ADFS

What are the standards that the Java web service needs to implement to achieve this scenario

if the above question is not relevant under this section. Please guide me where can i ask the question.

 

 

Answer 3

Thank you for the additional information.  Any of the following forums would be a better resource for you.

 

Microsoft ASP.NET Forums › General ASP.NET › Security
http://forums.asp.net/25.aspx

.Net 4 SAML Token Provider sample
http://msdn.microsoft.com/en-us/library/aa355062.aspx

Single Sign-on in ASP.NET and Other Platforms
http://www.codeproject.com/KB/aspnet/SingleSignon.aspx

Claim based Authentication- WIF : Part 3
http://www.codeproject.com/KB/web-security/ClaimbasedAuthPart3.aspx

The purpose of this forum is to support the Open Specifications documentation. You can read about the Microsoft Open Specifications program here,http://www.microsoft.com/openspecifications/en/us/default.aspx
The library of Open Specification documents is located here, http://msdn.microsoft.com/en-us/library/dd208104(PROT.10).aspx

---

Bryan S. Burgin Senior Escalation Engineer Microsoft Protocol Open Specifications Team