How are fedauth and RTFA cookies used in SharePoint?

How are fedauth and RTFA cookies used in SharePoint?

The FedAuth cookies enable federated authorization, and the rtFA cookie enables signing out the user from all SharePoint sites, even if the sign-out process starts from a non-SharePoint site. So, it is enough to provide SPOIDCRL HTTP header in order to perform authentication in SharePoint Online/Office 365, for example:

Why do I need Federated authentication in SharePoint?

The scenario is the following: I need to perform a federated authentication of a user (which uses his university account) into the Sharepoint site of his university and to obtain both the FedAuth and rtFa cookies (which I have to pass to SharePoint REST webservices in order to access resources).

How to create authenticated clientcontext object in SharePoint?

Creating an authenticated ClientContext object is a multistep process. First, the user must be able to sign into the remote system interactively. First, the user signs into SharePoint through the federated authentication provider, and SharePoint must issue its authentication cookies.

How to get a SharePoint cookie in ADFS?

In ADFS in Endpoints, we adjust URL; that very SecurityToken (wresult) we need for SharePoint authorization is sent to it by POST query. The problem is that we cannot receive this query in the application as it is broadcasted in status 302 and redirected to our application by the GET method, without SecurityToken with our Cookie.

How to get fedauth and RTFA from credentials?

This is the code that calls the method above and try to get FedAuth and rtFa from credentials in two steps (step 1: get SAML token from Federated Party; step 2: pass token from Federated Party to Sharepoint): I managed to get back a SAML token from the university STS.

What do RTFA cookies look like in Nintex?

FedAuth and rtFa cookies are yours. They look like this (Base64 encoded string): Caroline Jung ‌ had already made an article about that ( How to execute a SP2013 REST API request with Nintex Workflow ) however when it is valid for the current tenant.