ITfoxtec.SAML2 | ITfoxtec SAML 2.0 package adds SAML | Authentication library
kandi X-RAY | ITfoxtec.SAML2 Summary
kandi X-RAY | ITfoxtec.SAML2 Summary
I strongly recommend updating to the new component ITfoxtec Identity Saml2 because there are a handful of security issues with this old component. The ITfoxtec SAML 2.0 package adds SAML-P support on top of the SAML 2.0 token functionality implemented in the .NET framework. The ITfoxtec SAML 2.0 package implements the most important parts of the SAML-P standard and some optional features. Message signing and validation as well as decryption is supported. The package supports SAML 2.0 login, logout, single logout and metadata. Both SP Initiated and IdP Initiated sign on is supported. The SAML 2.0 package is tested for compliance with Active Directory Federation Services (AD FS). The Danish OIOSAML 2.0 profile is supported and tested for compliance with NemLog-in. ITfoxtec.SAML2 Project Home Page with description and link to NuGet.
Support
Quality
Security
License
Reuse
Top functions reviewed by kandi - BETA
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of ITfoxtec.SAML2
ITfoxtec.SAML2 Key Features
ITfoxtec.SAML2 Examples and Code Snippets
Community Discussions
Trending Discussions on ITfoxtec.SAML2
QUESTION
I'm trying to integrate OpenAM Saml SSO to my .net 5 application. ITfoxtec.Saml2 is used to handle the authentication on the SP. When trying to login, a valid post samlResponse is send. But when validating the response, I get following exception.
...ANSWER
Answered 2021-Oct-26 at 09:03The ITfoxtec Identity Saml2 package do not read the IdP signing certificate in the EntityDescriptor/KeyDescriptor
element, the element is not supported.
The IdP certificate is read in the EntityDescriptor/IDPSSODescriptor/KeyDescriptor
element.
Valid IdP metadata sample for the TestIdPCore sample:
QUESTION
I am attempting to make my ASP.NET MVC web app provide SSO to multiple IdPs, and I am wondering if it is possible to support this scenario using the ITfoxtec.SAML2 library.
I have many different clients, several of whom want to have an SSO integration with my service. Each of the clients has a different sub-domain (e.g. business1.myapp.com, business2.myapp.com, etc.) and I will need to use their unique part of the name to look up their metadata and produce a configuration that will talk back to them.
The example code that I have seen seems to be supporting a more traditional one IdP to one SP scenario.
Additionally, if any one knows of a non-Core ASP.NET MVC example application, I would be profoundly grateful to know where to find it.
...ANSWER
Answered 2020-Jan-16 at 11:24In your case I would implement some Saml2Configuration
logic, where I can ask for a specific Saml2Configuration
for the current IdP. This specific Saml2Configuration
is then used in the AuthController
.
After a binding.ReadSamlResponse(Request.ToGenericHttpRequest(), saml2AuthnResponse)
with a generic Saml2Configuration
you can read the IdP issuer in saml2AuthnResponse.Issuer
. And then load the correct Saml2Configuration
.
A link to a non-Core ASP.NET MVC relaying party sample application https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2/tree/master/test/TestWebApp
Community Discussions, Code Snippets contain sources that include Stack Exchange Network
Vulnerabilities
No vulnerabilities reported
Install ITfoxtec.SAML2
Support
Reuse Trending Solutions
Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items
Find more librariesStay Updated
Subscribe to our newsletter for trending solutions and developer bootcamps
Share this Page