I'm a bit confused about the different terminology, components and steps to make my scenario work.
I'm working on a SP 2010 platform that can have multiple authentication mechanisms : Anonymous, Integrated or external.
By external, I mean that the user have to log onto a unique corporate login page (out of SharePoint). The corporate login page, when authentication succeeds, redirect the user to the source page adding a token in the url. The corporate login also provides a way to validate the token (basically, an url having the token in the query returns ok or fail). This token can be validated only once.
What is the proper way to deal with this external login system (that cannot evolves) ?
the requirement is that the Sign in button redirect the user to the corporate login page. The OOB login form can't be used (but the authentication type selector can).
I'm quite sure than :
- I'll have to set up claims authentication
- I'll have to build a custom membership provider for FBA, that can validate my user against the corporate login system
What I'm not sure is how to plug everything. And I'm a bit confused by the concepts of identity delegation, claims aware service, SPClaimsProvider, etc.
Can someone help me by putting me on the right direction, and describe briefly the differences between these concepts ?