Products

Solutions

Resources

Partners

Community

Blog

About

QA

Ideas Test

New Community Website

Ordinarily, you'd be at the right spot, but we've recently launched a brand new community website... For the community, by the community.

Yay... Take Me to the Community!

Welcome to the DNN Community Forums, your preferred source of online community support for all things related to DNN.
In order to participate you must be a registered DNNizen

HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationAD Federation Services - Single Sign On - Is DNN ready?AD Federation Services - Single Sign On - Is DNN ready?
Previous
 
Next
New Post
2/9/2007 11:29 AM
 
So far, I haven't gotten anywhere with this.  The one thing I was unsure of in terms of needing the AD module or not... technically, do all users need to be in AD as well as in DNN, then ADFS just integrates them?  I have several applications I want to use ADFS for and wasn't sure if these users need to have logins in the actual web app as well as in AD or not... does that make sense what I'm asking!?
 
New Post
2/9/2007 12:49 PM
 

My understanding of ADFS is that your responsibility ends at trusting other organizations, not individual users. The users are users in the AD's of the other organizations (or whatever else they use - it is not limited to Windows AD). User management falls outside of the portal's realm and into theirs. That way, when a portal user leaves a job and their employer closes their account in their domain, they can longer access the portal. It saves users employers having to remember to tell you that Fred Jones no longer works for them or has changed job function and so should heve his rights on your portal revoked. It all happens automagically.

sharlynm wrote
The one thing I was unsure of in terms of needing the AD module or not... technically, do all users need to be in AD as well as in DNN, then ADFS just integrates them?

In answer to your question, I do not beleive that the DNN AD module has much, if anything, to do with ADFS because the users are not members of the domain (AD) in which the portal operates. ADFS would authenticate users from other companies, not your own.

 
New Post
2/9/2007 2:50 PM
 
is this how it would work for just web sso?  in adfs, there are three options right?  federated web sso, federated web sso with forest trust, and web sso.  We are looking at using it only within our organization so were planning on doing the plain ol' web sso, so i didn't know how that would differ and work.  I'm still trying to figure this all out!  we need a test box with a secure cert to be able to test this, and i don't currently have access to one.
 
New Post
2/9/2007 4:02 PM
 

ADFS is for not normally for use within a single company. It is usually allows company A's web app to allow Company B handle all user account details for itself. That of course is a huge simplification. You best bet would be to start here:

http://msdn.microsoft.com/msdnmag/issues/06/11/SingleSignOn/default.aspx

It give a good idea of what ADFS is and what it is used for.

 
Previous
 
Next
HomeHomeDNN Open Source...DNN Open Source...Provider and Extension ForumsProvider and Extension ForumsAuthenticationAuthenticationAD Federation Services - Single Sign On - Is DNN ready?AD Federation Services - Single Sign On - Is DNN ready?


These Forums are dedicated to discussion of DNN Platform and Evoq Solutions.

For the benefit of the community and to protect the integrity of the ecosystem, please observe the following posting guidelines:

  1. No Advertising. This includes promotion of commercial and non-commercial products or services which are not directly related to DNN.
  2. No vendor trolling / poaching. If someone posts about a vendor issue, allow the vendor or other customers to respond. Any post that looks like trolling / poaching will be removed.
  3. Discussion or promotion of DNN Platform product releases under a different brand name are strictly prohibited.
  4. No Flaming or Trolling.
  5. No Profanity, Racism, or Prejudice.
  6. Site Moderators have the final word on approving / removing a thread or post or comment.
  7. English language posting only, please.
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out
What is Liquid Content?
Find Out