azure-activedirectory-identitymodel-extensions-for-dotnet icon indicating copy to clipboard operation
azure-activedirectory-identitymodel-extensions-for-dotnet copied to clipboard

Implement serialization and deserialization of full federation metadata spec

Open gislikonrad opened this issue 5 years ago • 5 comments

Since WS-Trust is being added, wouldn't it make sense to flesh out the WsFederationMetadataSerializer? It reads the SecurityTokenServiceType just to get the keys from it and then it ignores the other role types.

The spec specifies multiple role types, but the most common ones are the SecurityTokenServiceType and ApplicationServiceType. Other elements that would be quite good to be able to read/write would be the IDPSSODescriptor and the SPSSODescriptor.

Is this something that could be useful in the wstrust branch?

gislikonrad avatar Aug 19 '20 12:08 gislikonrad

@gislikonrad yep, our POR includes bumping up our WsFederationMetadataSerializer support. Our first step was to support WaSignin for asp.net. We now have bigger objectives with some additional WsTrust and WCF federation binding support offered by the WCF team.

brentschmaltz avatar Aug 19 '20 17:08 brentschmaltz

A bit off topic, but...

@brentschmaltz So the WCF team is working on federation bindings for .net standard? That's great news. Do you know if this includes the CreateChannelWithIssuedToken method on the ChannelFactory. That would be quite useful on a WsTrustChannelFactory.

gislikonrad avatar Aug 19 '20 17:08 gislikonrad

@gislikonrad currently there is no plan for any ChannelFactory type objects, however some users have expressed interest. Here is the code for the WsFederationBinding : https://github.com/dotnet/wcf/tree/master/src/System.ServiceModel.Federation

brentschmaltz avatar Aug 19 '20 23:08 brentschmaltz

@gislikonrad We are adding WSTrustChannelFactory and WSTrustChannel to https://github.com/dotnet/wcf

Back to your ask, can you narrow your ask to some high value items. Full Spec has a lot of things most people don't care about.

brentschmaltz avatar Nov 04 '21 21:11 brentschmaltz

I've already implemented it on my own, so no worries.

gislikonrad avatar Nov 04 '21 21:11 gislikonrad