none
REST WCF service authentication RRS feed

  • Question

  • I have a REST WCF service that  requires client certificates for authentication. If I were to write a custom HTTP module and consume SWT tokens issued by ACS for authentication, can the 2 authentication mechanisms (mutual cert auth + SWT) coexist together within the same http request pipeline?
    Monday, May 21, 2012 11:34 AM

Answers

  • The 2 authentication mechanisms could coexist together within in the same http request pipeline, but it will be very complex, you need to write two logic for authentication, one is used to authenticate certificate and the other is used to authenticate SWT tokens.

    Please mark the replies as answers if they help or unmark if not. If you have any feedback about my replies, please contact msdnmg@microsoft.com Microsoft One Code Framework

    Tuesday, May 22, 2012 8:33 AM
    Moderator