I need expert advice on implementing SSO for a complex system.
MVC application needs seamless SSO with different apps:
1.Classic ASP app linked through the menu need to accept authenticated users without asking for credentials
2.Client intranet site hosted on different domain using AD need SSO for seamless integration with MVC app
3.Third party apps using their IdP and SAML-P need SSO with MVC app
Currently MVC app is using Web Form authentication, user and roles stored in SQL Server Database.
Ideally there should be minimal impact on the existing authentication/authorisation schema used in MVC app.
The solution needs to be flexible to role out to different clients on demand.
There are several limitations that are difficult to reconcile:
1.AFAIK Classic ASP does not have any support for SSO protocols
2. ADFS cannot use SQL Server as a data store
3. WIF does not support SAML-P
4. Each ...
Go to the complete details ...