I will go straight to the point in this post. This is a possible architecture if you want to allow OpenID authentication in a claims-aware WS-Federation-compatible web application. In this architecture there are three actors:
- the web application (aka the relying party)
- the OpenID provider (myopenid, Google, Yahoo, etc.)
- the “protocol broker” STS that “translates” WS-Fed to OpenID and viceversa




Комментариев нет, оставьте первый комментарий.