WIF (Windows Identity Foundation) with SAML 2.0

Question

First, a little background:

Recently, we were instructed to send SAML 2.0 approval to the server with which we are communicating. We use WCF for our client. The server does not use WCF. The guys who deploy the server do not have an STS that issues a SAML statement. We are trying to use the WIF framework because it supports SAML 2.0 tokens.

• Can I send a SAML 2.0 statement with a message from a client without receiving a SAML2 token from STS? If this is someone, please write some sample code on how to do this with WCF and Windows Identity Foundation? I looked around and found nothing.

• Does anyone have examples where a client receives a SAML2.0 token from STS and then sends this token with approval to the server application?

Answer 1

You can try a look at thinktecture starter STS . It comes with source code, so you can choose the bits that create the SAML token.

And from this, answer that you do not need STS.

Answer 2

I assume you want to use the standard WS-Security mechanism to attach a SAML token with a SOAP message? Your question essentially consists of two parts:

• How to get a token - are you likely to create it yourself? See this link for how to do this. http://www.leastprivilege.com/UsingSAMLAsAClientCredentialTypeInWCFWithGeneva.aspx

• How to send a token to a service as part of a SOAP message? You can attach a SAML token to the WCF channel using the WSTrustChannelFactory class. http://msdn.microsoft.com/en-us/library/ee517268.aspx

hope this helps, Zulfikar