如何在 SharePoint 2010 网站和 ASP.NET 应用程序之间共享身份验证上下文
是否可以与单独的 Asp.net 应用程序共享登录 Sharepoint 2010 用户的基于声明的身份验证？
以下文章介绍了如何使用 Sharepoint 2007 完成此操作并通过表单身份验证和共享计算机密钥等进行表单身份验证，但是我找不到有关使用 Sharepoint 2010 中现在使用的声明身份验证的外部应用程序的任何信息？
Is it possible to share the claims based authentication of a logged in Sharepoint 2010 user with a separate Asp.net application?
The following article describes how it was done using Sharepoint 2007 and forms authentication through forms auth and sharing machine keys etc however I cannot find any information regarding the external application consuming the claims authentication that is now used in Sharepoint 2010?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
谁在您的应用程序中对 SP 中的用户进行身份验证？
在基于声明的架构中，您通常会部署一个 STS 来验证用户身份并颁发安全令牌（例如 ADFS）。然后，您将把令牌处理回应用程序（在您的情况下为 Sharepoint），
由于 authN 已经外部化，您需要做的就是简单地将 STS（例如 ADFS）添加为 ASP.NET 应用程序的可信颁发者（使用 WIF） 。从概念上讲，您的 SP 应用程序和 ASP.NET 应用程序是不同的，并且规则可能不同。
从可用性的角度来看，用户永远不会看到双重登录，并且所有交互都会为他处理。然而，这两个应用程序仍然是独立的实体，您可以独立管理。
有道理吗？
底线：在基于声明的方法中，您无需任何解决方法即可获得“共享”。它内置于设计中。
Who authenticates the user in SP in your app?
In a claims based architecture, you normally would deploy an STS that will authenticate users and issue security tokens (e.g. ADFS). Then you would handle the token back to the app (Sharepoint in your case)
Since authN is already externalized, what you need to do is simply add the STS (e.g. ADFS) as a trusted issuer for the ASP.NET app (using WIF). Conceptually, your SP app and the ASP.NET app are different, with potentially different rules.
From a usability perspective, the user will never see a double logon and all interactions are handled for him. Yet, the 2 apps remain separate entities that you can manage independently.
Makes sense?
Bottom line: in a claims based approach, you get the "sharing" without any workarounds. It's built in into the design.