I have setup a basic IdentityServer that is up and running. I'm using Identity Manager and Identity Admin to keep everything (user, roles, claims, clients, scopes) in a database. Next step is to integrate authentication with AD. My requirements are:
- User will be authenticated against AD
- User permissions (claims/roles) will be stored in database (as they are now)
- Depending on the client application, I have three different scenarios:
- In some cases, the identity of the current user should be used (I guess for this to work, Identity Server should run with Windows Authentication). User should not be prompted for anything.
- In some cases, the user has to explicitly login. He can use the current login or
- Manually enter an username and password that will be validated against AD.
I'm looking for some pointers/direction how to proceed. Should I handle completely the login sequence myself, is there something similar I can base my solution, etc.
Any help is appreciated.