Saml2 | Saml2 Authentication services for ASP.NET | Authentication library

 by   Sustainsys C# Version: v2.9.1 License: Non-SPDX

kandi X-RAY | Saml2 Summary

kandi X-RAY | Saml2 Summary

Saml2 is a C# library typically used in Security, Authentication applications. Saml2 has no bugs and it has medium support. However Saml2 has 2 vulnerabilities and it has a Non-SPDX License. You can download it from GitHub.

[Join the chat at Sustainsys.Saml2.
Support
    Quality
      Security
        License
          Reuse

            kandi-support Support

              Saml2 has a medium active ecosystem.
              It has 874 star(s) with 587 fork(s). There are 84 watchers for this library.
              OutlinedDot
              It had no major release in the last 12 months.
              There are 89 open issues and 999 have been closed. On average issues are closed in 1495 days. There are no pull requests.
              It has a neutral sentiment in the developer community.
              The latest version of Saml2 is v2.9.1

            kandi-Quality Quality

              Saml2 has no bugs reported.

            kandi-Security Security

              Saml2 has 2 vulnerability issues reported (0 critical, 2 high, 0 medium, 0 low).

            kandi-License License

              Saml2 has a Non-SPDX License.
              Non-SPDX licenses can be open source with a non SPDX compliant license, or non open source licenses, and you need to review them closely before use.

            kandi-Reuse Reuse

              Saml2 releases are available to install and integrate.

            Top functions reviewed by kandi - BETA

            kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
            Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of Saml2
            Get all kandi verified functions for this library.

            Saml2 Key Features

            No Key Features are available at this moment for Saml2.

            Saml2 Examples and Code Snippets

            No Code Snippets are available at this moment for Saml2.

            Community Discussions

            QUESTION

            djangosaml2 authenticates user but i get anonymous user in my django view
            Asked 2021-Jun-12 at 12:19

            I am using djangosaml2 to authenticate my users. i've been using it for a long time now with no problem. i am currently in the process of upgrading python and django to newer versions and the authentication does not work any more. Using the logs, i see that the authentication in djangosaml2 is successful butin my view, the request.user is anonymous user.

            Here are the working and none-working libraty versions that i use:

            Python: 2.7 --> 3.8

            Django: 1.9 --> 1.11

            djangosaml2: 0.17.2 (in both evns.)

            pysaml2: 4.0.5 --> 6.5.1 (tested also with 4.0.5)

            Additional Info:

            i see that the call to /saml2/acs/ redirects to "/" (access to my site) and the response includes the session_id.

            The next http call - to "/" - includes the received session_id.

            However, in the Dbase i do not see this session id. As the session id is not found in the Dbase, it is indeed considered as anonymous.

            Any idea why the session id is not stored?

            ...

            ANSWER

            Answered 2021-Jun-12 at 12:19

            Ok, at last - i have a solution!

            The problem arises as in saml2 i deleted the user's pwd in my post authenticate method (for some other reason). This pwd is not something the user is aware of and as such, no harm was done. Turns out that the library creates a password that is used for calculating the session hash code even though the user itself is not aware of this pwd. The session hash is calculated with this pwd. when compared with the calculated hash (based on user's deleted pwd) te result is False - causing the session to be flushed (and as there is no session, the user is anonymous)

            This behavior is not new. Why did it work before, then?

            In older django versions, the get_user (in contrib.auth.init) used to check the hash with the following condition:

            Source https://stackoverflow.com/questions/67241098

            QUESTION

            Use the SAML attribute ForceAuthn with Google IdP
            Asked 2021-Jun-10 at 09:00

            Actually, we use Google IdP as a SSO / SAML authentication type for our application. We have configured it to connect our users to our application and it works fine. But recently, we have also wanted to ask a reauthentication to our users for different actions that could happen during the application lifecycle.

            In deeper details, when we send a SAML request to the Google Idp, we add the attribute ForceAuthn="true" in the node "AuthnRequest" and we also add a AuthnContextClassRef to ask explicitly that we want a reauthentication by credentials.

            When we send this SAML request to the Google IdP, the problem is that the IdP server doesn't ask credentials to the end user and redirect directly to the application with a successful response.

            Is that normal ? Does the Google IdP support the attribute ForceAuthn="true" ? I didn't find any documentation on this topic.

            Here is an example of the SAML request that has been sent to the IdP:

            ...

            ANSWER

            Answered 2021-Jun-10 at 09:00

            Official answer from Google support: "Google doesn't currently implement Single Log out/account reauthentication, for SAML authorized services. You may alternatively have the use of "session lengths"".

            Source https://stackoverflow.com/questions/67776825

            QUESTION

            Capable to keep logging-in on sample project in Azure with ITfoxtec SAML 2.0?
            Asked 2021-Jun-10 at 07:57

            I'm validating AAD-SSO for TestWebApp(ASP.NET MVC) ITfoxtec / ITfoxtec.Identity.Saml2.
            I confirmed login -> AAD sign-in -> Redirect to app but app still remains not logging-in.
            I assigned "https://localhost:***/Metadata" as Redirect Uri.
            I checked the other settings from another post. However that means the app only makes a xml file.

            Tell the procedure if there's anyone who succeeded logging-in on app?
            Or do I have to build new logic?
            e.g. of logic) receive session from AAD and

            ...

            ANSWER

            Answered 2021-Jun-10 at 07:57

            The https://localhost:***/Metadata is the metadata URL. AAD needs to redirect back to the applications AssertionConsumerService endpoint.

            You can have AAD reading the metadata or you can configure the AssertionConsumerService endpoint manually in AAD.

            Source https://stackoverflow.com/questions/67916717

            QUESTION

            Django saml2 login missing session variables
            Asked 2021-Jun-07 at 13:30

            For my Django application, I am trying to enable SSO using Djangosaml2 and following are the versions I am using

            djangosaml2==1.2.0

            pysaml2==7.0.0

            djangorestframework==3.12.2

            Django==3.1.7

            python==3.8

            My saml2_settings is as follows

            ...

            ANSWER

            Answered 2021-Jun-07 at 13:30

            I ended up doing the following two things, then it started working for me

            1. Downgraded the djangosaml2 and pysaml version to 0.19.0 and 4.9.0 respectively.

            2. For HTTPS connection, added SESSION_COOKIE_SECURE = True and for dev i.e. run server cases, SESSION_COOKIE_SECURE = False in your settings.py

            Source https://stackoverflow.com/questions/67798276

            QUESTION

            ITfoxtec.Identity.Saml2.Saml2RedirectBinding - AuthnRequest without ds:Signature element
            Asked 2021-Jun-03 at 18:58

            I'm trying to implement ITfoxtec.Identity.Saml2 library to send AuthnRequest to IdP with redirect binding. The IdP requires ds:Signature element to be presented in AuthnRequest, but when I set saml2Configuration.SignAuthnRequest to true as recommended here, the Signature element is still not there. It works with post binding, but I would like to use redirect binding.

            In the code I see there is XmlDocument = XmlDocument.SignDocument(...) in Saml2PostBinding.BindInternal() but it is not in Saml2RedirectBinding.BindInternal()

            Is there any reason why it is not in redirect binding as well? Am I somehow able to get Signature element there?

            Thank you.

            ...

            ANSWER

            Answered 2021-Jun-03 at 18:58

            If a AuthnRequest is signed using a PostBinding the signature is added to the XML.

            But if you do a RedirectBinding the signature and sign method is added as URL paramenters along side the SAMLRequest parameter, like this example:

            Source https://stackoverflow.com/questions/67818515

            QUESTION

            IdP metadata EntitiesDescriptor
            Asked 2021-May-19 at 12:39

            I'm using the ITfoxtec Identity SAML2 library with Keycloak as IdP. When requesting the IdP metadata information, the ITfoxtec Identity SAML2 library seems not to recognize the tag and expects a as the top level element in the metadata xml. Use of is described in https://docs.oasis-open.org/security/saml/v2.0/saml-metadata-2.0-os.pdf

            ...

            ANSWER

            Answered 2021-May-18 at 10:45

            I have released version 4.6.2-beta1 with support for reading SAML 2.0 metadata with a EntitiesDescriptor root element. The first EntityDescriptor element is selected.

            Please let me know if it works for you.

            Source https://stackoverflow.com/questions/67565206

            QUESTION

            WebLogic: add a new custom authentication-providers via WLST throws a ClassNotFoundException
            Asked 2021-May-18 at 02:44

            I am trying to add a new custom authentication-provider with a WLST online-mode script but I get a class not found exception despite I can see my provider on the WL console.

            This is the situation:

            1. I have a JAR file, it contains a custom WebLogic authentication-provider.
            2. The JAR is copied under the user_projects/domains/$DOMAIN_NAME/lib/ directory.
            3. I can see the custom auth provider on the WL console, appears in the list: Home > Security Realms > myrealm > Providers > new> Type
            4. I can add this custom provider by hand via WL Console.

            But I need to automate this step so I have created a WLST script for this. The relevant part of the WLST is this:

            ...

            ANSWER

            Answered 2021-Mar-16 at 10:32

            I added my JAR to the WLST classpath, but this did not help.

            • I changed the CLASSPATH variable because the wlst.sh executes a java command in the background so this standard variable must be considered. It did not work.
            • I added the -cp JVM param manually to the java command that starts the WlST. It did not work.

            The only workaround that worked for me is that the following:

            • for WL console: copy the JAR that contains the custom authentication provider under $ORACLE_HOME/user_projects/domains/$DOMAIN_NAME/lib/ directory
            • for WLST: copy the JAR to $ORACLE_HOME/wlserver/server/lib/mbeantypes/

            The 2nd copy solved the class not found issue thrown by the WLST.

            If you know a better, more standard way, please let me know.

            Source https://stackoverflow.com/questions/66599606

            QUESTION

            Require NSIS High in Authn Request
            Asked 2021-May-12 at 10:05

            I'm using the ITfoxtec.Identity.Saml2 package and have it connected to the Danish NemLog-in 3. How do I require the NSIS level High in a SAML 2.0 Authn Request?

            ...

            ANSWER

            Answered 2021-May-12 at 10:05

            You can add a RequestedAuthnContext to the Saml2AuthnRequest and with that add a AuthnContextClassRef requiring the NSIS level High (https://data.gov.dk/concept/core/nsis/loa/High).
            Set the Comparison to Minimum.

            Source https://stackoverflow.com/questions/67501224

            QUESTION

            openconnect with gp does not prompt for SAML authentication in command line
            Asked 2021-May-09 at 01:15

            I am using openconnect --protocol=gp vpn.mysite.com and it says its connecting, but it is waiting for the SAML authentication. The command and authentication works on my debian machine it prompts for a username and password, but trying on my other linux machine it does not seem to want to prompt for authentication. This is the output:

            ...

            ANSWER

            Answered 2021-May-09 at 01:15

            solved by adding --usergroup=gateway to the command

            so the total command that works is

            Source https://stackoverflow.com/questions/67450353

            QUESTION

            saml2Login method cannot be resolved
            Asked 2021-May-07 at 14:46

            I followed Spring Security SAML2 Using G Suite as Idp Cannot resolve method 'saml2login' in 'Http Security' I am getting this error some body plz help.

            ...

            ANSWER

            Answered 2021-May-07 at 14:46

            Solution: I am using spring boot 2.1.x version in my project. On changing it to 4.2.1, issue is solved.

            Source https://stackoverflow.com/questions/67015433

            Community Discussions, Code Snippets contain sources that include Stack Exchange Network

            Vulnerabilities

            No vulnerabilities reported

            Install Saml2

            You can download it from GitHub.

            Support

            For any new features, suggestions and bugs create an issue on GitHub. If you have any questions check and ask questions on community page Stack Overflow .
            Find more information at:

            Find, review, and download reusable Libraries, Code Snippets, Cloud APIs from over 650 million Knowledge Items

            Find more libraries

            Stay Updated

            Subscribe to our newsletter for trending solutions and developer bootcamps

            Agree to Sign up and Terms & Conditions

            Share this Page

            share link

            Explore Related Topics

            Consider Popular Authentication Libraries

            supabase

            by supabase

            iosched

            by google

            monica

            by monicahq

            authelia

            by authelia

            hydra

            by ory

            Try Top Libraries by Sustainsys

            owin-cookie-saver

            by SustainsysC#

            SSOTestApp

            by SustainsysC#

            AspNetcoreIdpInitiated

            by SustainsysC#

            Saml2.Samples

            by SustainsysC#