We have 1500 Entity and each entity has 9 action ( which means near 1500 Application and each application has 9 scope at AS) and we have 5000 users.
Our Authorization class ask each business method (entity+action) request to AS. AS server get Authentication from Identity Server from each request. Is this a performance gap for us?
Is there possible ask to AS for scope with existing STS token without called again Identity Server each time.
We have a lot of Desktop Client and some Web but not MVC. But we want use Authentication and Authorization for securities at all Client (Desktop+Web).
am i do wrong using STS and oauth2 ( in my example Thinktecture both of them) at Desktop application and non ASP.net, MVC applications. am i correct?
Hello,
We have 1500 Entity and each entity has 9 action ( which means near 1500 Application and each application has 9 scope at AS) and we have 5000 users.
Our Authorization class ask each business method (entity+action) request to AS. AS server get Authentication from Identity Server from each request. Is this a performance gap for us?
Is there possible ask to AS for scope with existing STS token without called again Identity Server each time.
We have a lot of Desktop Client and some Web but not MVC. But we want use Authentication and Authorization for securities at all Client (Desktop+Web).
am i do wrong using STS and oauth2 ( in my example Thinktecture both of them) at Desktop application and non ASP.net, MVC applications. am i correct?