I have MVC 3 website with STS for authenticating using WIF. After authenticating by STS web application make user Identity, claims (I guess saving them in cookies) and authorizing user based on this claims.
Now I need to change this service to third party SSO service.
After authenticating that SSO send to web application XML with user information: id, name, roles and other information that enough for making necessary claims.
So I do not have now security token with claims but have a set of strings with user name, role etc.
How to make everything what web application was doing after getting security token from STS: Identity, claims, session variables and cookies?
What components of WIF should I use to keep current based on claims authorization mechanism working?