Q: WS-Federation login without IdP login flow

Question

I want to allow a "logged in user" (from a non-claims aware application) to access a WS-Fed RP without having to login to the IdP. Looking to achieve the same as minting a SAMLP AuthN response programatically.

Possible?

Thanks in advance!

//Adam

Answer 1

Basically what you are asking is to turn your non-claims aware app into an IdP itself. Sure it's possible, but that means creating an STS for it. Then you have to configure the RP to accept tokens from that new STS, as well as the original STS.

---

Developer Security MVP | www.syfuhs.net

Answer 2

Great! Any tips on where I might find some sample code or an approach on how to achieve this?

Thanks in advance!
Sincerely,
//Adam