Home/ Questions/Q 8948031
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-06-15T12:54:08+00:00

We have an Internet facing Web Application running, and recently our company made some

  • 0

We have an Internet facing Web Application running, and recently our company made some agreements with a 3rd-party company which owns another web site. The idea is to provide access to this external web site to our current customers. Our users will click on an internal link in our solution which will open a new browser window with the third party site. User will not need to authenticate again in the 3rd party company site.
We have agreed to issue SAML2 tokens for our users, with a set of claims used by the 3rd-party site to query an present a personalized view to our users

Something important in our scenario is that users are already authenticated in our web site when they decide to access the 3rd-part web site.

What is the best way to implement all this?
I am thinking on implementing a custom-STS using the WIF SDK to generated those SAML2 tokens and pass then using HTTP POST (cookie) to the 3rd party site. If this is the right approach, then any pointers, tips?
Will ADFS make any difference?

Thanks for any help

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    If your application is ASP.NET, then connect your application to ADFS.

    So to get to your application, the user has to log in.

    Then for the link to the 3rd party application use the IDP Initiated scenario (IdpInitiatedSignOnPage Class Overview). This sends a SAML2 token to the 3rd party application. ADFS will handle SSO for you.

    To do this, you will have to configure the 3rd party application as a SAML one rather than a WS-Fed one.

    • 0