WCF Authentication and Authorization Using Windows Identity Foundation

Question

I am working on an asp.net mpc application and a WCF service that the mvc application will access. I am using a WIF-based website for authentication and authorization in the mvc application. Now I want to achieve the same thing in every web service method.

I think if I can transfer the claims I have in the MVC application to the WCF for authentication and authorization. I do not want WCF to contact STS again for authentication. I can not use windows authentication. I also want to use the ClaimsAuthorizationManager for this.

If anyone has something about this, please share. This will be a big help for me.

Joe

Answer 1

• If your WCF service is not REST, then perhaps you can find the answer here. Identity delegation using AD FS 2.0 Walkthrough
• If your WCF service is RESTful, check out the 8-ActiveRestClientFederation example (download from the Identification Guide ); Dominick Baier Guide Token-based authentication for the WCF REST service and from the Stefan Secure blog your REST-based WCF service with WIF .

Hope this helps.