OWIN Authentication Pipeline To Use Katana Middleware Correctly?

As @Tratcher said, the AuthenticationType parameter is used by Microsoft.Owin.Security as a key to do lookups of authentication middleware instances. The code below will use the following simple helper method to require that all requests are authenticated. In practice you’re more likely to use an [Authorize] attribute on sensitive controllers, but I wanted an example … Read more

SAML/ADFS node.js implementation guide?

I recently went through the same thought process: having never heard of SAML, I needed to enable a web application to authenticate via SAML with OneLogin as the identity provider (instead of Active Directory). During implementation, I made heavy use of OneLogin’s documentation and the passport-saml library, both of which I recommend, though I’m not … Read more

What’s the difference between ADFS, WIF, WS Federation, SAML, and STS?

ADFS (Active Directory Federation Services) – Off-the-shelf Security Token Service (STS) produced by Microsoft and built on Windows Identity Foundation (WIF). Relies on AD for authentication. Can be used in active (SOAP web services) or passive (web sites) scenarios and supports SAML tokens, WS-Federation, WS-Trust and SAML-Protocol. It can be used as an Identity Provider … Read more