如何使用标准 SAML IDP（而非 STS）对 Sharepoint 2010 站点的用户进行身份验证？
问题是我有一个标准的 SAML 2.0 Web-Profile IDP（定制的 Shibboleth），我可以很好地向 Google Apps 进行身份验证，但 Microsoft 决定再次拥抱并扩展 WIF，所以看起来事情不起作用现成的具有 Sharepoint 的 Web SSO (SingleSignOn)。
至少所有文档仅显示如何与 AD FS STS 集成，或者如何编写自己的 STS，因为围绕声明交换的协议不是标准的。
从概述来看，像往常一样，让我的 IDP 被调用（重定向到）并将 SAML 响应作为强制帖子返回似乎是可行的，但似乎很难告诉 WIF 仅处理我们提供的简单响应。
谢谢，
The problem is I have an standard SAML 2.0 Web-Profile IDP (a customized Shibboleth) that I can authenticate to Google Apps, nicely, but Microsoft decided to embrace-and-extend again, with WIF, so it seems things doesn't work off-the-shelf to have web SSO (SingleSignOn) with Sharepoint.
At least all the documentation show only how to integrate with AD FS STSs, or how to write your own STS as the protocols around claims exchange aren't standard.
From the overviews it seems feasible to have my IDP being called (redirected to) and returning the SAML response as a forced post, as usual, but it seems hard to tell WIF to just process the simple response we serve.
Thanks,
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
ADFS v2.0 支持 SAML 2.0。
如果 SP STS 不支持此功能，则只需将 ADFS 作为可信提供商添加到 SP STS 即可。
ADFS v2.0 does support SAML 2.0.
If the SP STS doesn't support this, then simply add ADFS as a trusted provider to the SP STS.
我认为 ADFS 2010 仅支持 WS-Federation 被动请求者配置文件，即不支持 SAML 2.0 Web SSO。
我相信 SAML 2.0 Web 配置文件支持是可能的，但除非您想编写大量自定义代码，否则您需要使用 PingFederate 等第三方产品来支持 SAML 2.0。
希望这有帮助 -
伊恩
I believe that ADFS 2010 only supports WS-Federation Passive Requester Profile -- ie, no SAML 2.0 Web SSO support.
SAML 2.0 Web Profile support is possible I believe but you'll need to use a 3rd Party product like PingFederate for SAML 2.0 support unless you want to write quite a bit of custom code.
Hope this helps -
Ian