Windows 身份基础主动身份验证
也许我的想法是错误的，但我想采用基于角色的 ASP .NET 表单身份验证并将其移植到 WIF，以便支持与其他应用程序的联合。
我知道这是一个广泛的问题，但如何使用 WIF 进行表单身份验证？这是一个有效的问题还是我误解了什么？我见过的所有例子都涉及AD和STS。我们甚至还不想开始托管 STS 服务器，而只是在基于声明的模型中构建代码，以便我们可以继续追求联合安全性。
有什么建议吗？
Maybe I'm going about this all wrong, but I'd like to take our Roles based ASP .NET Forms Authentication and port it to WIF so as to support federation with other applications.
I know this is a broad question, but how can I do Forms Authentication with WIF? Is this even a valid question or am I misunderstanding something? All the examples I've seen involve AD and STS. We don't even want to start hosting an STS server yet, but simply to structure the code in a claims based model so that we can pursue federated security going forward.
Any suggestions?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
在基于声明的架构中，您通常不再负责对用户进行身份验证。因此，不再有用户/密码，但您可能仍保留您的角色。
我建议阅读本指南的前几章（实际上很短）
（警告和披露：这是一个以 MSFT 为中心的指南，尽管您正在该平台上工作，而且我是作者之一）
顺便说一句：“主动身份验证”（尽管不完全正确的术语）主要指的是 Web 服务。 “被动客户端”通常是网站（您的情况）。
In a claims based architecture, you are generally not responsible for authenticating users anymore. Therefore, there're no more users/passwords, but you might still keep your roles.
I'd suggest reading the first couple chapters (quite short actually) of this guide
(caveats and disclosures: this is a MSFT centric guide, although you are working on that platform, and I'm one of the authors)
BTW: "Active Authentication" (although not exactly correct term) refers to web services mostly. "Passive clients" are usually web sites (your case).
在基于声明的身份验证单点登录的情况下，拥有角色会带来一些好处，如果用户经过身份验证可以访问 Application1 和 Application2，但不能访问 Application3，我们可以从角色中获取这一点，因为我们可以指定这一点。
In case of claim based authentication single sign on , there comes some benefits of having Roles, if a user is authenticated to access Application1 and Application2 but not the Application3, this we can get from roles as we can specify this.