Question

I’ve been trying to figure WIF out for a while now, and can force the user to sign in via my STS using passiveRedirectEnabled and restricting access to my site to known users.

I now want to rather use my own sign in view page on my RP and programmatically sign a user in across all of my sites trusting the same STS.

Users should be able to view my site completely, but have the option to sign in via a link in my site navigation.

I’ve looked for hours now and can’t find a simple working answer to achieve this.

Is there something along the lines of WSFederationAuthenticationModule.FederatedSignOut for sign in too?

How would I go about doing this, if it’s at all possible.

Regards.

Answer 1

Yes there is – have a look at Establishing Trust from an ASP.NET Relying Party Application to an STS using the FederatedPassiveSignIn Control.

IIRC, this is part of the WIF SDK.