My main website uses passive federation (ADFS 2.0) and includes javascript that communicates with an MVC Web API site using jsonp.
I am facing a challenge in getting this WebAPI to support Single Sign On on the same machine but different port. The passive redirects are causing issues with the jsonp requests, as the STS returns its own script instead of redirecting to the actual URL for the response script.
I am wondering if passive federation is compatible with a jsonp webapi. If not, how can I implement Active Federation without requiring username/password credentials? Since users are already authenticated via the main website before accessing the webapi, how can I leverage their existing login status within the webapi?