Link to home
Start Free TrialLog in
Avatar of jawsdk
jawsdk

asked on

SingleSignOn with ADFS in my Classic ASP site?

I have a Classic ASP site, hosted on Windows 2003, IIS 6. My client would like to have SSO (SingleSignOn) using his ADFS, instead of my own self built user login system. Is there an easy way to do this, where someone have already built the wheel, so integration will be easy?

My system is SaaS, hosted externally from the client ADFS.

Can someone explain me ADFS structure and how to accomplish this?
Avatar of arnold
arnold
Flag of United States of America image

Disable anonymous logins, let the user be prompted or authentication, then your ASP have to look at the environment variables to identify the user that logged in and rely on your nternal mask for what rights the user has.
http://stackoverflow.com/questions/13148226/access-iis-server-variables-in-nancy-module
http://forums.asp.net/t/1540119.aspx
Avatar of jawsdk
jawsdk

ASKER

arnold: I guess this will only work when IIS is on same internal network as users. But as I told, this is externally hosted SaaS system, so we cant do this.
One way is they need to periodically export their AD data and for you to import it. Or you can tie your app to proxy/remote connect to their AD.

What options do you have on your own systems?
Avatar of jawsdk

ASKER

They are using ADFS (not good old AD) and as far as I can read, this is especially good to do SSO with external providers, like me. But that is as far as I can come...
ASKER CERTIFIED SOLUTION
Avatar of arnold
arnold
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial