Federation
Trust between organizations and applications: SAML and WS-Federation, AD FS claim rules, Entra ID federation and federation server hardening.
Topics: Authorization · Cloud computing · Events & community · General · Identity & access management · Federation · Information security · Mobile security · Social login · News · Technical · Archives
- Federation
AD FS Claim Rules for LDAP Attribute Stores, Line by Line
A line-by-line guide to AD FS claim rules that query LDAP attribute stores: conditions, issue versus add, store, types, query format, param and escaping rules.
- Federation
Using an LDAP Attribute Store in AD FS
How to add an LDAP attribute store to AD FS, connect it to AD LDS or another directory, and use it in claim rules for attributes AD does not hold.
- Federation
SP-Initiated SSO on .NET: From WIF to Modern Libraries
How service provider initiated sign-in works, why Windows Identity Foundation only covered WS-Federation, and the options for SAML 2.0 and OIDC on ASP.NET Core.
- Information security
Locking Down a Federation Server: Expose Only What You Must
How to shrink the attack surface of PingFederate or any federation server: separate admin and runtime, allowlist endpoints at the proxy, and add security headers.
- Federation
Microsoft 365 and SAML 2.0: Federating Entra ID With Your IdP
How Microsoft 365 sign-in works through Microsoft Entra ID, when to federate a domain with a third-party SAML 2.0 identity provider, and the settings that matter.
- Federation
Federation and Entitlement Management: How They Fit Together
Federation tells an app who the user is; entitlement management decides what they may do. How SAML, OIDC, SCIM and policy engines divide the work.