CODEWITHSUNDEEP
wifiis-expressadfs2.0
VimKin
VimKin

Reputation: 61

Configure application pools in IIS Express

Recently I have been using IIS Express and it works really great. However, I have on scenario I am unable to solve.

I am developing a webapp where users should be able to login with their AD account. Since the server which will run the webapp is outside the domain I use ADFS 2.0 as a SSO solution to solve this problem.

To make development for this project easier, I have chosen to use IIS Express when developing.

To be able to exchange claims information with the ADFS 2.0 server from my development environment, I have to configure the application pool for the site to have Load User Profile set to true (like i.e. IIS 7.5). I have searched around the web, and have so far found very little documentation on how to configure application pools in IIS Express.

Upvotes: 0

Views: 2943

Answers (1)

woloski
woloski

Reputation: 2873

This has nothing to do with ADFS but it's the way WIF uses to sign and encrypt the cookie that will be used to identify the user after the initial sign in. The default implementation in WIF uses DPAPI which relies om the user profile to get key material.

You can override that default and use the machinekey as key material instead. Indeed thats the way it works in NET 4.5 by default precisely because all the issues with DPAPI. Here you have the way to do it in Net 4

http://leastprivilege.com/2012/07/12/machinekey-based-session-protection-for-wif/

Upvotes: 5

Related Questions