« Back to home

Obtaining a SAML 2.0 assertion from AD FS by using WS-Trust and Integrated Windows Authentication

Using Integrated Windows Authentication (IWA) to authenticate to AD FS not only works for OAuth. We can also use IWA to get SAML 2.0 assertions. Continue »

Obtaining AD FS access tokens using the client credentials grant and Integrated Windows Authentication

When an application needs to authenticate to AD FS, we don’t have to use a client secret. Instead, we can let the application use its existing Kerberos or NTLM credentials to authenticate. Continue »

About Johannes

Johannes Passing lives in Melboutne, Australia, and works as a Staff Solutions Architect at Google Cloud where he helps customers around the globe make the most of Google Cloud IAM to secure their identities and resources.

Johannes also maintains several open-source projects and is the author of many security best practices published on the Google Cloud website.

Besides IAM, Johannes has a passion for software architecture and lean software development.

Johannes holds an M.Sc. in software systems engineering from Hasso Plattner Institute, is a Google-certitified Professional Cloud Architect and Professional Cloud Security Engineer and is ITILv3- and PRINCE2-certified.

Any opinions expressed on this blog are Johannes' own.

Contact Johannes at jpassing (at) hotmail com