asp.net - Share ADFS/WIF federated claims cookie on multiple virtual applications (but the same domain) -


i'm trying (re)use adfs 2/wif claims based authentication cookies multiple different applications running on same domain.

so have these applications/virtual directories reuse same authentication cookie:

in portal, i'd include (client side authenticated) content myapp, don't want every app authenticated separately redirect sts/adfs.

i thought pretty straightforward both access same cookie reside on same domain, cookie valid application created in (fedauth , fedauth1 cookie paths restricted "/portal/")

when set 'path' in cookiehandler settings "/", exception:

[securitytokenexception: id4291: security token 'system.identitymodel.tokens.sessionsecuritytoken' not scoped current endpoint.]    system.identitymodel.tokens.sessionsecuritytokenhandler.validatetoken(sessionsecuritytoken token, string endpointid) +1008632    system.identitymodel.services.sessionauthenticationmodule.validatesessiontoken(sessionsecuritytoken sessionsecuritytoken) +351    system.identitymodel.services.sessionauthenticationmodule.setprincipalfromsessiontoken(sessionsecuritytoken sessionsecuritytoken) +91    system.identitymodel.services.sessionauthenticationmodule.authenticatesessionsecuritytoken(sessionsecuritytoken sessiontoken, boolean writecookie) +66    system.identitymodel.services.sessionauthenticationmodule.onauthenticaterequest(object sender, eventargs eventargs) +929    system.web.synceventexecutionstep.system.web.httpapplication.iexecutionstep.execute() +80    system.web.httpapplication.executestep(iexecutionstep step, boolean& completedsynchronously) +165 

i've tried use microsoft.owin.security.wsfederation beta packages mentioned in article alternative, no success getting running: http://blogs.msdn.com/b/webdev/archive/2014/02/21/using-claims-in-your-web-app-is-easier-with-the-new-owin-security-components.aspx

before i'm going try override methods in sessionsecuritytokenhandler, possible i'm trying achieve?

thanks in advance!

change cookiehandler below in system.identitymodel.services --> federationconfiguration

  <federatedauthentication>        <cookiehandler requiressl="true" path="/" />   </federatedauthentication> 

Comments

Popular posts from this blog

apache - Remove .php and add trailing slash in url using htaccess not loading css -

javascript - jQuery show full size image on click -