关闭的，现成的安全令牌服务（STS），使用ASP.NET成员资格的供应商？ [英] Off-the-shelf Security Token Service (STS) that uses ASP.NET membership provider?

问题描述

我想移动当前使用标准的ASP.NET成员资格提供程序通过Windows标识基础和Azure的ACS使用基于声明的身份验证的网站。

I'd like to move a site that currently uses the standard ASP.NET membership provider to use claims-based authentication through Windows Identity Foundation and Azure ACS.

我们打算表面使用OAuth 2.0担保REST服务的网站，因此这似乎是一个明智的做法跟随。我们也有必要联合我们与外部第三方ADFS等体系认证，这是precisely ACS解决得很好的问题。

We're going to surface the site using OAuth 2.0 secured REST services so this seems a sensible approach to follow. We also have a need to federate our authentication with external third-party ADFS and other systems, which is precisely the problem that ACS solves very well.

不过，我也想保留的能力，为我们的现有用户使用他们现有的凭据。

However, I would also like to retain the ability for our existing users to use their existing credentials.

要做到这一点，我想我需要一个定义STS，与ASP.NET成员资格提供工作。

To do this I think I need a custom STS that works with the ASP.NET Membership Provider.

所有文献（例如Bertocci的编程Windows标识基础）认为，这是一个坏主意，编写自定义STS。而且，我同意 - 我真的不喜欢写我们自己的安全code

All the literature (e.g. Bertocci's "Programming Windows Identity Foundation") suggests that it's a bad idea to write a custom STS. And, I agree -- I really don't like writing our own security code.

那么 - 有可用，可以使用成员资格提供数据的STS

So - is there an STS available that can use Membership Provider data?

推荐答案

看看在Identity Server（ HTTP ：//identityserver.$c$cplex.com ），它使用SQL成员资格提供。

Take a look at the Identity Server (http://identityserver.codeplex.com) which uses the SQL Membership Provider.

这是一个自定义的STS，但它的强大，可扩展和良好架构的。

It's a custom STS, but it's robust, extensible, and well architected.

更新：该项目页面被更改为 http://thinktecture.github.io/Thinktecture .IdentityServer.v2 / code已经转移到 https://github.com/thinktecture/Thinktecture.IdentityServer.v2

Update: The project page is changed to http://thinktecture.github.io/Thinktecture.IdentityServer.v2/ Code has moved to https://github.com/thinktecture/Thinktecture.IdentityServer.v2

这篇关于关闭的，现成的安全令牌服务（STS），使用ASP.NET成员资格的供应商？的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！