Unanswered

how to indentify WS-TRUST authentication through network call for SOAP request

(0) Share

Report

Posted on by skmanja

Can someone please let me know how to indentify WS-TRUST authentication through network call for SOAP request that is going to deprecate? and how to identify?

Categories:

Microsoft Dataverse with Power Apps

I have the same question (0)

All responses (2)

Answers (0)

mrstrong 7 on at

Like (0)

Report

Hi,
Did you ever get a reply around this? The documentation is sadly lacking around this.

Was this reply helpful? Yes No
ChrisPiasecki 6,422 Most Valuable Professional on at

Like (0)

Report

Hi @skmanja,

Your development teams should scan custom code using specific namespaces within the SDK, or using certain connection strings that include a username/pw.

https://docs.microsoft.com/en-us/powerapps/developer/data-platform/authenticate-office365-deprecation

If you are just interested in identifying the use of ws-trust through network traffic, you'll be specifically interested in the Ws-Federation sign-in protocol. The SOAP payload will contain a SAMLv1 security token upon authenticating to the identity provider (e.g. Azure AD or your on prem Adfs instance) , which is then presented to the a service provider (e.g. Dynamics 365).

The article below does a good job of explaining the HTTP request/response and provides a sample of what a security token looks like. Hopefully that will help you find what you're looking for.

https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/adfs-deep-dive-comparing-ws-fed-saml-and-oauth/ba-p/257584

---
Please click Accept as Solution if my post answered your question. This will help others find solutions to similar questions. If you like my post and/or find it helpful, please consider giving it a Thumbs Up.

Was this reply helpful? Yes No