My client desires to have a certian configuration of web services and I am not sure it can be done.
In essence, the task is to create a web service handler (let's call it WSH) which intercepts any calls to web services on a particular IIS server. WSH would first perform an authorization for the requested service, using the SAML token obtained by the client application. If authorization is successful, the requested web service is executed, otherwise an error message is sent to the requesting application.
This has to be transparent to both the application and the web service. The application should request as if this handler does not exist and the web serice should respond as the handler does not exist. So the way in which the handler should work is by intercepting the requests for services and performing the proper authorization check.
Is such an architecture possible in IIS/ASP.NET? If it is, can someone give me an idea how I create the handler and inte ...
Go to the complete details ...