What practical workflow uses claims for authentication and authorization in a web application?

Question

I just don't get a claims / authorization based authentication process.

The application allows authentication through Facebook.com

After user authentication, the administrator can submit to him / her an application for the role of manager, who create another requirement (where?)

Of course, this requirement will not be on the facebook.com server, question 1: where should this application be stored?

When the user logs in again later, do I receive a request for facebook.com and should I receive a request from the application? and combine them?

How does the workflow work? An attempt to understand the requirements in practical use.

Basically, facebook tell me that I am [e-mail] and the field in the spaces adds the statement that I am also the manager of domain.com

then do I forward these claims to domain.com?

How do I configure an asp.net application on a .com domain to trust facebook and “fill in the blank part” and request an application form like?

I assume that I use external providers for authentication and my own provider for authentication, how is this created on ASP.NET (web api / mvc)?

UPDATE (for clarification)

. -, . "- " ClaimsBased - ( ?), , , .

, - :

/authserver/

, X, .

facebook.

/facebook/

, X

/authserver/, X Y.

ASP.NET? //?

, - .

Answer 1

, .

- .

- , .

, . / , (, / ). , , , . , , , , , , . / . / ( ).   - - (№1) - (№ 2), . StackOverflow (# 1), Gmail (# 2). Google , Google , , , . /url , , ( , , , , ). Google , URL-, . URL-, , StackOverflow - , , NewEgg ( , - StackOverflow - , StackOverflow, , ). StackOverflow ( StackOverflow - , ).

StackOverflow . , , " " Qaru ( , OAuth, OpenID SO Login). , . - (, :) ( ). . , (, Local SO Login), .

(Google, Facebook ..), , - ( ), , ( ).

, - №1 ( ) - №2 (Google) . №1 , .

SO, Identity ASP.Net :

Asp.net MVC 5

mvc 5

Identity MVC - ASP.NET MVC 5

Answer 2

ASPNET.Identity(http://www.asp.net/identity/overview/getting-started/introduction-to-aspnet-identity), . userlogin, , Facebook, MVC.

:

var acRes = await UserManager.AddClaimAsync(userId, new Claim(ClaimTypes.Role, "MyRole"));