title: Supporting Single Sign-On with Active Directory
body: <p>We have a SaaS app written on .NET and we need to offer various methods of SSO to our customers.</p>
  
  <p>A while ago we standardized on OpenID, hoping that this would become a universal standard and liberate us from having to support different standards. Unfortunately, enterprises never quite got on board with OpenID and we are always asked to support Active Directory. (Our app just needs basic authentication, not fine-grained authorization to use different objects/permissions/etc.)</p>
  
  <p>We're hoping to avoid a lot of extra development -- if we want to offer easy integration to the greatest number of Windows A.D. users, which should we support -- LDAP or SAML? And if SAML, 1.x or 2.x?</p>