Last post Mar 15, 2016 02:24 PM by BrockAllen
Mar 14, 2016 01:36 PM|sudip_inn|LINK
anyone can explain what is relation between identity and claim authentication with example.
i found below one
what is claim ?
is it any kind of authentication system ?
i guess claim is token based auth......am i right ?
give me a scenario that when identity use claim auth. thanks
Mar 15, 2016 08:31 AM|PanFeng|LINK
what is claim ?
ASP.NET Identity is a framework which supports both the Form authentication and claims-based authentication. For more detail, please see the following links:
Introduction to Claims
Think of a claim as a piece of identity information such as name, e-mail address, age, membership in the Sales role. The more claims your application receives, the more you’ll know
about your user. You may be wondering why these are called “claims,” rather than “attributes,” as is commonly used in describing enterprise directories. The reason has to do with the delivery method. In this model, your application doesn’t look up user attributes
in a directory. Instead, the user delivers claims to your application, and your application examines them. Each claim is made by an issuer, and you trust the claim only as much as you trust the issuer. For example, you trust a claim made by your company’s
domain controller more than you trust a claim made by the user herself. WIF represents claims with a Claim type, which has an Issuer property that allows you to find out who issued the claim.
see An Introduction to Claims
suggest you could make an example with it, you can refer to the following links:
Claims-Based Identity Model
Claims and Authorization with the Identity Model
Aware Forms Authentication
Mar 15, 2016 02:24 PM|BrockAllen|LINK
There is no such thing as "claims based authentication". That's like saying "role based authentication" -- it just doesn't make sense.
The proper term is "claims based identity", which means you use claims to model the identity of your users. Claims are flexible ways of modeling the user's identity and a role is just a claim. So is email, name, age, etc...