--- title: Authenticate Users with WS-Federation in Web Applications description: A practical guide to implementing WS-Federation authentication in .NET 10 web applications, aimed at developers maintaining legacy ASP.NET systems that need to... canonical: https://daily.dev/posts/authenticate-users-with-ws-federation-in-web-applications-acidufvxh twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Authenticate Users with WS-Federation in Web Applications | daily.dev og:description: A practical guide to implementing WS-Federation authentication in .NET 10 web applications, aimed at developers maintaining legacy ASP.NET systems that need to... og:url: https://daily.dev/posts/authenticate-users-with-ws-federation-in-web-applications-acidufvxh og:image: https://api.daily.dev/og/posts/ACiDUfvxH.png og:image:alt: Authenticate Users with WS-Federation in Web Applications og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Authenticate Users with WS-Federation in Web Applications **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 9 min read · 1 upvotes · 1 comments ## Summary A practical guide to implementing WS-Federation authentication in .NET 10 web applications, aimed at developers maintaining legacy ASP.NET systems that need to integrate with modern identity providers like Microsoft Entra ID. Covers the Passive Requestor Profile flow step-by-step, maps WS-Federation concepts to their OIDC equivalents, provides working Program.cs configuration code, and details debugging techniques for common failures like the infinite redirect loop. Also covers modernization exit strategies including running OIDC and WS-Federation side-by-side and using identity proxies to avoid code rewrites. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [Web Single Sign-on with WS-Federation](https://daily.dev/posts/web-single-sign-on-with-ws-federation-2u79uqnqy) · Security Boulevard · 0 upvotes · 0 comments - [Understanding the Differences Between WS-Federation and Other Protocols](https://daily.dev/posts/understanding-the-differences-between-ws-federation-and-other-protocols-z1kxxdk09) · Security Boulevard · 0 upvotes · 0 comments - [Configuring WS-Federation Single Sign-on for Resources](https://daily.dev/posts/configuring-ws-federation-single-sign-on-for-resources-dtcr5lk2d) · Security Boulevard · 0 upvotes · 0 comments - [Jaliya's Blog: Using Microsoft Entra ID Workload Identity Federation \(WIF\) to Deploy from GitHub Actions to Azure](https://daily.dev/posts/jaliya-s-blog-using-microsoft-entra-id-workload-identity-federation-wif-to-deploy-from-github-act-gbnxmvtbs) · We Are .NET · 0 upvotes · 0 comments --- Tags: [#authentication](https://daily.dev/tags/authentication), [#aspnetcore](https://daily.dev/tags/aspnetcore) [View this post on daily.dev](https://daily.dev/posts/authenticate-users-with-ws-federation-in-web-applications-acidufvxh) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Authenticate Users with WS-Federation in Web Applications","url":"https://daily.dev/posts/authenticate-users-with-ws-federation-in-web-applications-acidufvxh","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/authenticate-users-with-ws-federation-in-web-applications-acidufvxh"},"datePublished":"2026-02-24T13:22:39.796Z","dateModified":"2026-02-24T13:23:09.411Z","description":"A practical guide to implementing WS-Federation authentication in .NET 10 web applications, aimed at developers maintaining legacy ASP.NET systems that need to...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d4a5664e9bc5000ca69ebb11d7829279?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d4a5664e9bc5000ca69ebb11d7829279?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":1,"discussionUrl":"https://daily.dev/posts/authenticate-users-with-ws-federation-in-web-applications-acidufvxh","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":1},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":1}],"keywords":"authentication,aspnetcore","timeRequired":"PT9M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"Authenticate Users with WS-Federation in Web Applications"}]} ```