Implement claim-based (WIF) onto Kentico CMS

Hi,

I would like to know is there a way to implement claim-based with Microsoft Identity Model and System Identity Model onto Kentico CMS?

I'm working on implementing claim-based onto an existing website Kentico CMS running on version 4. I do not have the Kentico project solution as the previous guy left without providing much stuff.

Here's what I wanted to achieve:

My situation is that instead of using Kentico CMS login for authentication, I want to use my custom login which after authenticating the user, pass user claims to Kentico.

Here's what I have been trying and found some rather unusual behavior from WIF on Kentico CMS.

I somehow noticed that the policy under claimsAuthorizationManager in the web.config, it can help to "protect" resources (like webpage or url path), but somehow after the authentication, claims didn't pass through.

Also, I tried changing the thumbprint value under issuerNameRegistry tag in web.config to a invalid thumbprint cert, somehow, the authentication still works.

I'm suspecting that somehow the WIF didn't kick in to handle the entire process correctly.

Please advice.