STS incoming SAML validation with custom certificate

2019-08-06 Thread Tóth Csaba
Hello! I have a request with the STS to validate a incoming SAML with a certificate what come from another source: example need to query it from a database, based on the data in the request. How start it? I know the SAML validation is in the deep and need the certificate to be in a

Re: Continue to Support text password

2019-08-06 Thread Colm O hEigeartaigh
Hi, The WS-SecurityPolicy spec doesn't define a separate policy for plaintext passwords - only for the "NoPassword" and "HashPassword" options. If you want to support plaintext passwords, then don't use either of these policies - and the "passwordType" variable in UsernameToken is set to null.