CODEWITHSUNDEEP
pythonwindowsauthenticationwiffederated-identity
codeape
codeape

Reputation: 100886

Decentralized authentication against Windows domain

There are many solutions for third-party decentralized authentication that are pretty simple to set up: log in with Facebook credentials, OpenID, OAuth etc.

How can I do something similar inside the firewall, in a Windows domain environment?

The scenario:

I know I can validate a username/password against Active Directory using LDAP, but that is not what I want. I don't want my app to handle the username/password at all. I want it to work as OpenID does, i.e. my app redirects the user to some sort of Windows identity provider web page.

Is there a out-of-the-box Windows/IIS solution for this?

EDIT:

Upvotes: 1

Views: 1786

Answers (3)

Andrew Lavers
Andrew Lavers

Reputation: 8141

At the risk of giving too many answers, it sounds to me like ADFS 2.0 is your path of least resistance. As far as integrating claims based access into your python application, I've seen pysaml2 recommended as a way to do this, but I can't speak from experience.

Upvotes: 2

rbrayb
rbrayb

Reputation: 46773

WIF together with Azure ACS will provide this out the box. e.g. Adding a Custom OpenID Provider to ACS… with JUST ONE LINE of PowerShell Code.

Or you could integrate with Dot Net Open Auth either with your own STS or using something like Identity Server.

Upvotes: 1

larsks
larsks

Reputation: 312400

I'm not a Windows guy, but Crowd from Atlassian:

  • Will run on Windows
  • Can authenticate against Active Directory
  • Includes an OpenID provider

So if you're application can handle OpenID, you'd have everything you need.

Upvotes: 2

Related Questions