Questions tagged [claims]

Claims were introduced in .NET4.5 to build Claims based authentication into the framework in the form of ClaimsIdentity and ClaimsPrincipal in the System.Security.Claims namespace.

Claims were introduced in .NET4.5 to build Claims based authentication into the framework in the form of ClaimsIdentity and ClaimsPrincipal in the System.Security.Claims namespace.

459 questions
10
votes
2 answers

How to retrieve Claims Value in .Net Core 2.0

As it says in the title I have already assigned claims to the registered user, I am now trying to retrieve the claim value when the user logs into the application within the UserClaims table in sql server which I find a bit difficult to do as this…
10
votes
1 answer

Where is http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name defined?

OASIS owns the http://schemas.xmlsoap.org/ws/2005/05/identity namespace, but I can't find anywhere that defines the "name" claim type. There are other claims like First Name, Last Name, Email Address, etc. but no claim that just refers to Name. Is…
Steven Padfield
  • 584
  • 1
  • 4
  • 12
10
votes
2 answers

InvalidNameIDPolicy working with ADFS

I have many clients that uses SSO, for that we use SAML 2. Many of my clients uses providers like Okta, PingIdentity and a bunch of them ADFS. Doing the integration with ADFS always at the beginning raises this error when they came back with the…
wcpaez
  • 146
  • 1
  • 2
  • 9
10
votes
2 answers

Using ClaimsAuthenticationManager in a console application

I was playing around with new stuff in 4.5 and wrote a simple console application that is supposed to check a few things in new claims based security model. I've created custom implementations of ClaimsAuthorizationManager and…
emdzej
  • 135
  • 1
  • 8
9
votes
3 answers

Windows Azure Access Control & WPF?

Anyone has worked with Windows Azure Access Control & WPF Client? I like authentication of Zune Client with Live ID. I need authenticate with Windows Live ID in my WPF app. I have a Website that works with Windows Azure Acces Control , I use claims…
Ricardo Pons
  • 249
  • 1
  • 2
  • 8
9
votes
1 answer

Complex claims in JWT

The JWT RFC does not seem to have any problem containing complex arrays such as: { "email": "test@test.com", "businesses": [ { "businessId": "1", "businessName": "One", "roles": [ …
diegosasw
  • 8,724
  • 7
  • 66
  • 106
9
votes
2 answers

MVC 5 - Add a claim to a user

I am developing a MVC 5 internet application and am using Identity 2.1. How can I add a claim to a user, after the user has logged in, where I knows the username? Here is what I have: public void AddClaimToUser(string userName, string type, string…
user3736648
  • 6,783
  • 17
  • 67
  • 145
9
votes
1 answer

Claims Based Authentication - SharePoint and generally

All, I've been doing a lot of reading around Claims Based Authentication and am still a bit confused. I'm trying to solidify my understanding, specifically relating to SharePoint 2010/2013, but also generally (i.e. ASP.NET). My understanding of…
8
votes
2 answers

Can NameIdentifier and IdentityProvider (WIF) claims be used to uniquely identify any user?

Thinking of using Access Control Service (ACS) and Windows Identity Foundation (WIF) to secure my WCF Data Services Web API application. How can I use claims to uniquely identify a user? My idea is to use the combination of the standard claim…
noopman
  • 600
  • 1
  • 3
  • 14
7
votes
1 answer

ASP.Net Identity and IdentityServer4 Claims

I'm using IdentityServer4 as an OIDC provider and ASP.NET Core 2.0. I have gone through several posts to ensure that the claims issued by IdentityServer end up in the ClaimsPrincipal (ie Auth Cookie), and have managed to get this working with…
Simon
  • 126
  • 3
7
votes
3 answers

Identity Server - Identity/Resource scope - How can client get resource claims about the user

I have read Dominik's blog post on authentication vs permission modeling using Identity Server (https://leastprivilege.com/2016/12/16/identity-vs-permissions/). Since I am mostly using role based authorization, I am fine using IdentityServer as…
sharppanda
  • 81
  • 1
  • 7
7
votes
1 answer

MVC 5 and use of claims default authentication

I have a question regarding the claims in MVC 5. So basically imagine I have a registered user in DB, now the user is going to log in, like so: private async Task SignInAsync(ApplicationUser user, bool isPersistent) { …
Alnedru
  • 2,406
  • 8
  • 45
  • 81
6
votes
1 answer

Is claims based authorization appropriate for individual resources

I understand the usage of claims for things I would commonly refer to as "roles" or "permissions". I know that claims are more general, but from what I have seen in practice, it usually boils down to this: If user has this set of claims they can…
BlakeH
  • 2,904
  • 2
  • 16
  • 24
6
votes
3 answers

How to separate large cookies in Asp.Net Identity into a smaller ones to allow MANY claims?

I'm working on a prototype of a claims-based authorisation for our MVC application. We use Asp.Net Identity for authentication. We would like to have a claim for every controller action and then give/take away users' claims so we have a very fine…
trailmax
  • 31,605
  • 20
  • 126
  • 225
5
votes
3 answers

How to deal with concurrency failure on IdentityUser update?

I have a method to update user claims within our app. I am logged as an admin user who can edit other users. I am trying to remove existing claims of one user and assign new ones. When removing claims using UserManger I am getting ConcurrencyFailure…
1
2
3
30 31