Windows Azure Platform Developer Center > Azure Forums > .NET Services > windows identiy on .net service bus
Ask a questionAsk a question
 

Answerwindows identiy on .net service bus

  • Thursday, June 25, 2009 12:23 PMinfy123 Users MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     
    When the service is hosted on .net service bus, which internally makes the calls to  on premise hosted webservice/some other framework which is configured under integrated windows authentication.    How to send windows identity from the client application to service bus hosted service?

Answers

  • Friday, June 26, 2009 6:27 AMYi-Lun LuoMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hello, this won't be easy. You need to deploy a Geneva Server in your company, and configure the Geneva Server to use your Active Directory as the identity provider. Then configure your ACS scope to accept claims issued by your Geneva Server. Now on the client side, you will be able to login with your Active Directory account.

    I suggest you to download the Identity Training Kit from http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c3e315fa-94e2-4028-99cb-904369f177c0. Pay special attention to "Access Control Service" => "Exercise 3: Configuring a Web Service to Accept Tokens from .NET Access Control Service". It tells you how to configure ACS to accept tokens from a custom STS. In your scenario, you need to change the custom STS to your Geneva Server.
    Lante, shanaolanxing This posting is provided "AS IS" with no warranties, and confers no rights.

All Replies

  • Friday, June 26, 2009 6:27 AMYi-Lun LuoMSFT, ModeratorUsers MedalsUsers MedalsUsers MedalsUsers MedalsUsers Medals
     Answer
    Hello, this won't be easy. You need to deploy a Geneva Server in your company, and configure the Geneva Server to use your Active Directory as the identity provider. Then configure your ACS scope to accept claims issued by your Geneva Server. Now on the client side, you will be able to login with your Active Directory account.

    I suggest you to download the Identity Training Kit from http://www.microsoft.com/downloads/details.aspx?displaylang=en&FamilyID=c3e315fa-94e2-4028-99cb-904369f177c0. Pay special attention to "Access Control Service" => "Exercise 3: Configuring a Web Service to Accept Tokens from .NET Access Control Service". It tells you how to configure ACS to accept tokens from a custom STS. In your scenario, you need to change the custom STS to your Geneva Server.
    Lante, shanaolanxing This posting is provided "AS IS" with no warranties, and confers no rights.