Home/ Questions/Q 7676375
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-31T17:11:07+00:00

I’m currently looking into using WIF for an upcoming project and would appreciate some

  • 0

I’m currently looking into using WIF for an upcoming project and would appreciate some help finding information. I’ve looked around a bit and don’t have a decisive answer.

I have a current site that runs off ASP membership, and I have a large number of users in those tables.

  • Are there any trusted custom STS’s out there that use the membership
    table?
  • Would my current site, which uses ASP membership require much change
    to use WIF and a STS?
  • Do I have to use a certificate when using WIF?
  • What is the difference between ADFS and ASP Membership
    implementation?
  • Are their any easier MS based solutions to SSO out there?

Thank you for any help you can provide.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    • Take a look at IdentityServer for a custom STS that uses the SQL Server Membership Provider.
      (Update: The project page is changed to http://thinktecture.github.io/Thinktecture.IdentityServer.v2/ Code has moved to https://github.com/thinktecture/Thinktecture.IdentityServer.v2)

    • Most of the changes to your current site would involve configuration and including the Windows Identity Foundation (WIF) library. Since the identity model in WIF builds on top of the ASP.NET identity model, there shouldn’t be much of a coding change unless you’re doing anything highly customized with the user principal.

    • At the minimum, you will need two certificates. First, you will need an SSL certificate for your site since the AD FS endpoint must be HTTPS. You will also need a signing certificate on AD FS and your web server that will be used to validate the token that AD FS delivers. You can optionally encrypt the security token, which would require another certificate.

    • AD FS uses ActiveDirectory Domain Services (AD DS) for authentication. Since it’s an STS, there’s really no comparison between it and the ASP.NET Membership provider. Take a look at this article for a complete explanation of claims-based authentication.

    • If you’re looking for an easier SSO solution, there are options out there. I would google around since you’ll find several .NET solutions. I can’t speak to any one in particular since it depends on your requirements.

    Hopefully this helps.

    • 0