Summary
A Security Token Service (STS) is a web service that issues security tokens. The concept of STS is defined in a web service specification called WS-Trust, which specifies how a security token must be requested and issued. Creating an STS from scratch involves a fair bit of work. Windows Identity Foundation (WIF) , a framework from Microsoft, does all the work for you by abstracting away the nuts and bolts of WS-Trust and presenting a nice API surface for you to work on as you build an STS.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Rights and permissions
Copyright information
© 2013 Badrinarayanan Lakshmiraghavan
About this chapter
Cite this chapter
Lakshmiraghavan, B. (2013). Custom STS through WIF. In: Pro ASP.NET Web API Security. Apress, Berkeley, CA. https://doi.org/10.1007/978-1-4302-5783-7_7
Download citation
DOI: https://doi.org/10.1007/978-1-4302-5783-7_7
Publisher Name: Apress, Berkeley, CA
Print ISBN: 978-1-4302-5782-0
Online ISBN: 978-1-4302-5783-7
eBook Packages: Professional and Applied ComputingApress Access BooksProfessional and Applied Computing (R0)