"MVC OWIN WS Federation" Sample is not working

[eman-ali-mughal]

Hi Dominick,

I have been testing the samples for Ws-Federation, I have hosted ( Identity Server V3 – Preview 1) on Azure. All other samples are working fine, But When I am testing “MVC OWIN WS-Federation” project its not working, Its give me 401 Unauthorized access, when i want to access Claims for the user. problem is its no redirecting on to the Azure path. I have also changed the “baseaddress” constant in the constants file, so that it points to Azure hosted website. I have also perform necessary settings in the Identity Server. Problem is All other samples are working fine with Azure hosting. But Ws-Frderation sample is not working. Its is not redirecting to Azure hosted idsrv login page. But this sample is working fine when i am running idsrv on local IIS express at localhost:3333.
Can you please let me know where i need to setup configuraiton ?
Thanks
Eman

[brockallen]

You will experience this if the ws-fed metadata endpoint is not accessible.

[eman-ali-mughal]

Thanks for the reply Brock,
I have downloaded (IdentityServer V3 Preview) from GitHub and it was latest code, but It seems that WS Federation project code is different. Then I have downloaded (WsFed_POC) release of May 14, and in the WsFederationController class correct Rout attributes was added on the top of Actions methods. So this version of identity server solved the problem.

Thank you

Eman

[eman-ali-mughal]

Hi,

Log out for ws-federation is not working, in-fact it is not redirecting us back to the login screen. Just blank screen is appearing when i press logout from OWIN wsfederation sample. Is this thing implemented?

Thanks

Eman

[brockallen]

Yes, logout is partially implemented. WS-Fed should be working. We recently moved the samples here: https://github.com/thinktecture/Thinktecture.IdentityServer.v3.Samples

Also, depending upon which ws-fed library you're using, you might have issues. The Katana one is still not fully implemented.

[eman-ali-mughal]

I have downloaded identity server from here
https://github.com/thinktecture/Thinktecture.IdentityServer.v3/releases

I have downloaded the WsFed_POC which i believe is latest.
I have downloaded the samples from the url you have mentioned. In the "MVC OWIN Ws-Federation" project i am getting this
http://localhost:3333/core/wsfed?wtrealm=urn%3aowinrp&wa=wsignout1.0
when i am pressing signout.

Upon investigation i have found this code in the WsFederationController.cs of WsFederation project.in the Identity server.

var signout = message as SignOutRequestMessage;
if (signout != null)
{
// todo: call main signout page which in turn calls back the ws-fed specific one
var ctx = Request.GetOwinContext();
ctx.Authentication.SignOut(Constants.PrimaryAuthenticationType);

                return await SignOutCallback();
            }

So i am thinking that Signout functionality is still needs to be done. Just wanted to make sure that my understanding of the code is correct, and i am pointing towards right direction.

Secondly i have tested Facebook component for login, and its working fine.

Thanks for your reply

Eman

[brockallen]

I suspect those are out of date -- May is a while ago :)

The latest on master (here and in the other sample repo) is what I was talking about that worked.

[brockallen]

We'll close for now since we're doing a beta next week. Try again then, please. Thx.