使用WS-Fed或SAML从其他联合域访问CRM Web API [英] access CRM web API from other federation domain using WS-Fed or SAML

问题描述

我们有一个中间件系统（系统A）需要从另一个联盟域访问CRM Web API（系统B）。在开发环境中，我们使用WS-Fed。在生产环境中，我们使用了SAML声明。 

We have a middle-ware system (system A) which needs to access CRM web API (system B)from another federation domain. In the development environment, we use WS-Fed. The the production env, we used SAML claims. 

由于这是机器到机器并通过不同的联合，我想知道什么是适应此GET操作的最佳方法。

Since this is machine to machine and through different federation, I am wondering what is the best approach to accommodate this GET action.

1：我尝试使用ASP.NET来模仿依赖方来调用联合URL（STS）。它工作，但凭证不能通过。我希望我们可以使用系统A中的代码访问系统B，而无需手动中断。我可以看到，一旦获得cookie，就可以建立会话
。但是，我必须手动输入密码，即使用户 登录请求消息中已接受名称。

1: I tried to use ASP.NET to mimic the relying party to call the federation url ( STS). It worked, however the credential cannot be passed through. I hope we could use code from system A to access system B without manual interruptions. I could see the session could be established once the cookies obtained. However, I have to manually enter the password, even though the user  name has been accepted in the signing in request message.

我主要使用Microsoft Identity dll。新的OWIN包会给我更多的优势吗？

I mainly used Microsoft Identity dll. Would the new OWIN package give me more advantage on this topic?

2。有没有更好的方法来适应这种操作来访问两个不同的联邦系统并简单轻松地使用机器到机器的谈话机制？ 

2. Are there better way to accommodate this kind of action on accessing two different federation systems and using machine to machine talk mechanism simply and easily? 

感谢和问候，

推荐答案

这是一个ASP.NET应用程序吗？如果是，那么请在ASP.NET
论坛中发布您的问题。如果这是一个Windows应用程序，那么现在大多数API都是基于REST的，并支持使用OAuth2，这就是目前实现服务器到服务器通信的方式。

Is this an ASP.NET app? If so then please post your question in the ASP.NET forums. If this is a Windows app then most APIs are REST based now and support using OAuth2 which is how server-to-server communication is implemented these days.

这篇关于使用WS-Fed或SAML从其他联合域访问CRM Web API的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！