Question

我希望有人可以帮助我。如何通过TCP进行联合？我使用ADFS作为我的STS。我的WCF服务（依赖方）通过net.tcp绑定公开其端点。可以通过wsHttp端点访问STS。我该怎么做？有什么建议吗？

谢谢

Answer 1

我只是想知道我是否正确地这样做了。我创建了一个自定义绑定。这是服务器端。

<!-- STS Binding -->
<ws2007HttpBinding>
 <binding name="STSBinding">
  <security mode="TransportWithMessageCredential">
    <transport clientCredentialType="Windows">
    <extendedProtectionPolicy policyEnforcement="Never" />
      </transport>
     <message clientCredentialType="Windows" negotiateServiceCredential="true"
    algorithmSuite="Default" establishSecurityContext="false"/>
   </security>
  </binding>
</ws2007HttpBinding>

<customBinding>
<binding name="WCFTestServiceLibrary.IService1_FederationNetTcpBinding">
<security authenticationMode="SecureConversation" requireSecurityContextCancellation="true">
<secureConversationBootstrap authenticationMode="IssuedToken">
<issuedTokenParameters tokenType="http://docs.oasis-open.org/wss/oasis-wss-saml-token-profile-  1.1#SAMLV2.0">
  <issuer address="https://test/adfs/services/trust/13/issuedtokenmixedasymmetricbasic256"
   binding="ws2007HttpBinding" bindingConfiguration="STSBinding">
  </issuer>
  <issuerMetadata address="https://test/adfs/services/trust/mex" />
  <claimTypeRequirements>
  <add claimType="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" isOptional="true" />
  <add claimType="http://schemas.microsoft.com/ws/2008/06/identity/claims/role" isOptional="true" />
  </claimTypeRequirements>
  </issuedTokenParameters>
  </secureConversationBootstrap>
  </security>
  <binaryMessageEncoding  />
  <tcpTransport  />
  </binding>
</customBinding>

Answer 2

从来没有这样做，但是从我读过的内容开始：

检查您的端点是否已在ADFS中启用。

然后将tcp添加到ADFS IIS站点的“Enabled Protocols”。

参考Enabling net.tcp

TCP联合和ADFS

2 个答案: