title: How use Windows Login in Winforms application to access SAML Service Provider
body: <p>I'm working with a company that has a WinForms application running on a corporate windows network. The application currently connects to a web application server that has its own private username/password store. The web app server has JSP based UIs, but also has some web services which support JWT based authentication. </p>
  
  <p>The company would like to use use accounts from its windows domain to authenticate the users rather than using a separate set of usernames and passwords. The company's domain has an AD FS server and the web application is a SAML service provider. </p>
  
  <p>The question is, is it possible to use the identity information from the original windows login to get a SAML token from ADFS and then use that token to talk to web services on the web application machine? </p>
  
  <p>We're looking at Windows Identity Foundation built into the .net framework as a possibility. Open ID Connect also seems like a possibility, but we don't want to have to present the user a web page for them to log in; we want to use the original windows login identity information to automatically grant access to the service provider. </p>
  
  <p>Is this possible?  </p>
  
  <p>SAML support is already built into the web application, but if necessary we could add support for OpenID Connect. </p>