使用 LiveID 时从 ACS 获取输入电子邮件地址
使用 Live ID 时，是否可以通过任何方式连接 ACS 规则以使用 $(InputValue) 从 ACS 返回/传递用户的电子邮件地址？
我正在使用被动身份验证并被重定向到 Live ID，但我想知道是否有任何方法可以从 ACS 连接规则，该规则可能会获取 InputValue 电子邮件地址
据我所知，我认为通过托管登录可能可以实现这一点当然，我希望能够以其他方式从 ACS 获取它（如果可能的话）。
（我应该补充一点，当前场景是在现有 ASP.Net 应用程序之上实现 Live ID 身份验证，并具有用于用户身份和角色的数据库后端。）
与当前场景相关的额外信息：当前场景是一个现有系统拥有自己的本土数据库身份验证安全模型。我尝试了各种方法来查看是否可以拦截用户的电子邮件地址，并最终决定执行此操作的可用方法并不可取（在这种特定情况下）。
在这种情况下，过渡到 Live ID 身份验证的唯一合适且安全的模式是围绕您的应用程序构建一个注册系统，该系统允许现有用户注册其 LiveID，然后将他们带回您的应用程序以捕获其 Live ID“nameidentifier” 。
但是，鉴于任何未知用户都可以执行此操作，因此有必要通过电子邮件或类似机制进行临时身份验证步骤，以验证正在使用的 Live ID 电子邮件地址。
我希望这对某人有帮助。
Is it in any way possible to wire up an ACS rule to return/PassThrough the user's email adress from ACS using $(InputValue) when using Live ID?
I am using Passive authentication and get redirected out to Live ID but I was wondering if there is any way to wire up a rule from ACS that might get the InputValue email address
From what I can see I think this might be possible by hosting a login page of course but I would prefer to be able to get it in some other way from ACS if possible.
(I should have added that the current scenario is to implement Live ID authentication on top of an existing ASP.Net application with a database backend for user identity and roles.)
Extra information related to the current scenario : The current scenario is an EXISTING system with its own home-grown database authentication security model. I tried all sorts of ways to see if I could intercept the user's email address and eventually decided the available approaches for doing this were not desirable (in this specific scenario).
The only suitable and secure pattern found to transition to Live ID authentication in this scenarioo is to build a Registration system around your application which allows an existing user to register their LiveID and then bring them back to your application to capture their Live ID 'nameidentifier'.
However, given that any unknown user could do this it would be necessary to have an interim authentication step via email or some-such mechanism to validate the Live ID email address being used.
I hope this is of help to someone.
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（2）
可能，但它需要一些自定义 sts 的代码：
https://gist.github.com/1867792
代码不会构建，也不包含依赖项...但它很大程度上基于移植到 MVC4 的早期 thinktecture 入门站点，并进行了如上所示的更改。
Possible but it requires a bit of code for a custom sts:
https://gist.github.com/1867792
Code doesn't build and dependencies aren't included... but it's largely based off an early thinktecture starter site ported to MVC4 with changes shown above.
遗憾的是，在将 ACS 与 Windows Live 一起使用时，不可能获得任何可识别的声明。这是由于 Windows Live 用户隐私政策。
使用 Windows Live，您只会获得依赖方应用程序特有的 ID 声明。
Unfortunately it is not possible to get any identifiable claims when using ACS with Windows Live. This is due to Windows Live user privacy policy.
With windows live you will only get a ID claim which is unique to your Relying Party application.