日内瓦服务器STS
我的要求是分配给用户的声明是公司知道的,例如 用户1:是公司1的产品经理的发布者,但同一用户只是公司B的编辑者。这可以通过Geneva Server实现吗?或者需要编写额外的代码来覆盖类。
My requirement is the claims assigned to a user are company aware so say for example
User 1: is publisher for Product Manager for Company 1 but the same user is only editor for Company B. Can this be achieved through Geneva Server, or additional code needs to be written to override classes.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
在我看来,依赖方本身应该根据身份本身来决定将哪些角色附加到令牌上。
但是,您可以根据各个依赖方设置规则,并选择根据后备存储所说的内容将信息作为声明提供。 现在,如何在您使用的任何后备存储(AD、LDAP、SQL 等等)中表示该信息是您的设计决策。 您可能还想考虑利用 beta 2 中的声明转换语言。
如果不知道您的声明支持存储将位于何处以及为什么您认为需要走这条路线,则很难给出任何具体建议。
In my opinion it's the relying party itself should be making decisions on what roles to attach to a token based upon the identity itself.
However you can set rules based on individual relying parties and choose to serve information as a claim based on whatever the backing store says. Now how you represent that information in whatever backing store you are using (AD, LDAP, SQL, whatever) is a design decision at your end. You may also want to look at harnessing the claims transformation language in beta 2.
It's really hard to give any specific advice without knowing details about where your claim backing store is going to be and why you think you need to go this route.