In SDL Web 8.5, I implemented a simple-ish
HTTPModule that bridges the CME with ADFS 2016 (using SAML) and provides the SSO
UserId request header to the CME web applications. This works fine.
I'm now attempting to connect to CoreService (or TemplateBuilder), but so far with little success. I read several posts about running CoreService behind an SSO proxy that exposes a basic auth endpoint. I see such proxy in the CME, but I can't any information about it.
Also I see people had success running the services in mixed authentication mode (using traditional Windows or Integrated security). That is not an option to me, since the Active Directory is not available to the CME server.
What options do I have? Has anybody implemented some kind of token mechanism in front of CM services to relay the UserId SAML claim from ADFS to CoreService for example? Is this path viable? Any other ideas/concerns?