Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Welcome To Ask or Share your Answers For Others

Categories

0 votes
2.4k views
in Technique[技术] by (71.8m points)

single sign on - Is there a maximum length for NameIdentifier claim values?

We're adding single sign-on to an existing application that now requires a database table to store the external identity values (ClaimTypes.NameIdentifier). We're adding both WSFederation and OpenIdConnect support.

From the documentation I've read and examples I've used within development, there doesn't appear to be a specification for this value.

Currently within development we are receiving non-volatile read-only values from AzureAD that cannot be edited for each user (to prevent re-use, or any amendment if somebody changes their name, etc.) that look similar to this:

http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier
P6RFlL7ubzJaGgGfvLcFrGSIu_XCrq4m0nuZvvyNe5w

However, I'm interested to know if tenants can return longer values? To help design the most efficient database/queries, is there a specification/recommendation for this value, particularly it's maximum length?


与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
Welcome To Ask or Share your Answers For Others

1 Reply

0 votes
by (71.8m points)
等待大神答复

与恶龙缠斗过久,自身亦成为恶龙;凝视深渊过久,深渊将回以凝视…
OGeek|极客中国-欢迎来到极客的世界,一个免费开放的程序员编程交流平台!开放,进步,分享!让技术改变生活,让极客改变未来! Welcome to OGeek Q&A Community for programmer and developer-Open, Learning and Share
Click Here to Ask a Question

...