Skip to content

Commit c76c470

Browse files
committed
Added CSRF and ADFS login sections
1 parent 6eb27e1 commit c76c470

File tree

1 file changed

+9
-2
lines changed

1 file changed

+9
-2
lines changed

doc/Development-Guide.html

Lines changed: 9 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -152,8 +152,7 @@ <h4>Login</h4>
152152
<img class="img-thumbnail" alt="Change password" height="304" src="images/account-change-password.png" width="422" /></p>
153153
<p>
154154
After changing password we are redirected to the Angular application.</p>
155-
<h4>
156-
Social Logins</h4>
155+
<h4>Social Logins</h4>
157156
<p>
158157
ASP.NET Zero supports social media logins. To enable it, we should change
159158
the following settings in <strong>web.config</strong> file.</p>
@@ -176,6 +175,12 @@ <h4>
176175
we will not go to details of creating apps on social medias. Once you get your
177176
keys, you can write them into web.config. When you enable it, social media logos
178177
are shown on the login page:</p>
178+
<h4>Active Directory Federation Service (ADFS) Login</h4>
179+
<p>ADFS is just another external login like social logins. In order to configure ADFS login, you just need to configure following settings in <strong>web.config</strong> file.</p>
180+
<pre lang="xml">&lt;add key=&quot;ExternalAuth.WsFederation.IsEnabled&quot; value=&quot;false&quot; /&gt;
181+
&lt;add key=&quot;ExternalAuth.WsFederation.MetaDataAddress&quot; value=&quot;&quot; /&gt;
182+
&lt;add key=&quot;ExternalAuth.WsFederation.Wtrealm&quot; value=&quot;&quot; /&gt;
183+
</pre>
179184
<p>
180185
<img class="img-thumbnail" alt="Social login" height="464" src="images/social-login-logos.png" width="415" /></p>
181186
<p>
@@ -939,6 +944,8 @@ <h4>Base Classes</h4>
939944
</ul>
940945
<p>It's strongly recommended to inherit one of these classes upon your needs
941946
since they really make Logging, Localization, Authorization... easier.</p>
947+
<h4>CSRF/XSRF Protection</h4>
948+
<p>ABP framework simplifies and automates CSRF protection as much as possible. AspNet Zero template comes with pre-configured and working out of the box. For more information please see ABP's <a href="http://aspnetboilerplate.com/Pages/Documents/XSRF-CSRF-Protectionhttp://aspnetboilerplate.com/Pages/Documents/XSRF-CSRF-Protection">XSRF-CSRF-Protection documentation</a></p>
942949
<h4>Versioning</h4>
943950
<p><strong>AppVersionHelper</strong> class is used to define <strong>current version</strong> of the
944951
application in single place. When you change <strong>Version</strong> here, all

0 commit comments

Comments
 (0)