Indigo STS Implementation

A couple of folks were giving talks at TechEd this week and used a little Security Token Service (STS) prototype I'd put together. I'm posting a version here so that folks can download it and play with it at their leisure. Any suggestions for improvements, new features, bug reports, post a comment.
 
Thanks to Tomek for posting the file. I was too inept to be able to figure out how to upload using winscp…
 
BTW - You'll need a fairly recent build of Indigo to compile and run this code.

Posted Jun 19 2006, 10:20 PM by martin-gudgin
Filed under: , ,

Comments

Code me up, code me down wrote Security Token Service by Gudge
on 06-19-2006 6:06 AM
Indigo Cowboy wrote re: Indigo STS Implementation
on 06-19-2006 5:27 PM
Thanks for sample, I had to extract this scenario from federation sample. I have a problem to create wse client that will use wcf sts and communicatie with wcf service. Can you help me with this interpoerable scenarion?
Gudge wrote re: Indigo STS Implementation
on 06-19-2006 6:08 PM
Indigo Cowboy,

Send me mail (mgudgin at microsoft dot com) and I'll hook you up with the right folks

Gudge
pragma.pack@gmail.com wrote re: Indigo STS Implementation
on 07-02-2006 12:12 AM
which WinFx version is needed to compile your code ? Thank you to precise the exact CTP or Beta version.
Gudge wrote re: Indigo STS Implementation
on 07-02-2006 3:16 AM
pragma pack,

My guess is it will compile against the June CTP but given I didn't build the code against a specific CTP or Beta version, but rather against whatever was in our source tree on the date in question, I can't really answer your question.

Gudge
pragma.pack@gmail.com wrote re: Indigo STS Implementation
on 07-03-2006 4:32 AM
Gudge,

If I try to compile your code using WinFX Beta2 here the error:
'RequestSecurityToken' is an ambiguous reference between 'System.ServiceModel.Security.RequestSecurityToken' and 'Gudge.Samples.Security.RSTRSTR.RequestSecurityToken' \STS\SecurityTokenService\SecurityTokenService.cs Line 81 Column 52

This is normal because the class RequestSecurityToken is defined in System.ServiceModel.Security and you referenced this namespace in your code.

BUT RequestSecurityToken only exists until WinFX Beta2 version, this class has been removed in the June CTP

That’s why I’m asked you which version you’re compatible with.

pragma
pragma.pack@gmail.com wrote re: Indigo STS Implementation
on 07-03-2006 7:42 PM
I confirm that your code compiles only using the June CTP, e.g. the 'service/host/baseAddresses' in the app.config didn't exist till the June CTP.

After having configured the certificate, I succeeded to launch the STS ! But I cannot create a managed card to use it because the current 'Managed Card Creator' <http://wcs.netfx3.com/files/folders/wcs_tools_beta2/default.aspx> doesn't run using the June CTP.

Can you post a Managed Card Creator compliant with the June CTP?

PS: I'm not a MS guy, so I don't have access to your source tree :) I can only use CTP or Beta builds ;)

pragma
olivier Rouit wrote re: Indigo STS Implementation
on 08-07-2006 8:14 PM
Hi,

I compile your code on the CTP of July, I used two certificate of my own (that I'm using with a Federation Sample) and the STS workd fine.

However the TestHarness fails. From what I could see from the logs and using the debugger, it fails within WCF, the RST doesn't arrive at the Issue level in the implementation of the IWSTrust contract.

Do you have any clue of what it could be or eventually could you post the original certificates that are referenced in your code?

I have finalized a complete STS not using WCF but I'm a bit in the dark to verify it, specially because the logs don't give the Nonce used in the key derivation and prevent me from writing a verifier of RSTR generated by WCF itself :-(

I've seen a BinarySecurityToken element (that I don't get with my other sample). What is it used for?

Thanks for any help
Rgds
Olivier
Pablo M. Cibraro (aka Cibrax) wrote SAML - STS implementation for WCF
on 09-07-2006 5:36 PM
I finally decided to publish a STS implementation for WCF. (It isbased onone of my previous posts, &quot;Implementing
anothr user wrote Anothr feed track -Musings from Gudge
on 09-03-2007 8:21 AM
One new subscriber from Anothr Alerts

Add a Comment

(required)  
(optional)
(required)  
Remember Me?