sustainsys-saml2

SSO Sustainsys.Saml2.Owin Request is not Authenticated - access_denied

[亡魂溺海] 提交于 2021-02-18 08:50:31
问题 I have to do SSO authentication with saml2 for my existing asp.net web application. I am using Sustainsys.Saml2.Owin example to do that. Identity provider is Azure ADFS ( https://sts.windows.net/TENANTID ) I have configured the Startup file. It loads the metadata file and certificate. And in my Login page, I am challenging if not authenticated. It is successfully redirecting to the login page but the Request is never getting authenticated after the login. And in the reply URL we are getting

.NetCore code with sustainsys-saml2 does nothing

Deadly 提交于 2021-02-08 10:58:31
问题 I have an .Net MVC project with SSO working. The SSO config looks like this: <system.identityModel> <identityConfiguration saveBootstrapContext="true"> <caches> <sessionSecurityTokenCache type="Vixion.IdentityModel.Cache.SharedSessionSecurityTokenCache, Vixion.IdentityModel.Cache"> <cacheServiceAddress url="http://tvwapps35434d.kpnis.nl:1008/SessionSecurityTokenCacheService.svc" /> </sessionSecurityTokenCache> </caches> <audienceUris> <add value="http://localhost:24442/" /> </audienceUris>

.NetCore code with sustainsys-saml2 does nothing

一世执手 提交于 2021-02-08 10:51:15
问题 I have an .Net MVC project with SSO working. The SSO config looks like this: <system.identityModel> <identityConfiguration saveBootstrapContext="true"> <caches> <sessionSecurityTokenCache type="Vixion.IdentityModel.Cache.SharedSessionSecurityTokenCache, Vixion.IdentityModel.Cache"> <cacheServiceAddress url="http://tvwapps35434d.kpnis.nl:1008/SessionSecurityTokenCacheService.svc" /> </sessionSecurityTokenCache> </caches> <audienceUris> <add value="http://localhost:24442/" /> </audienceUris>

.NetCore code with sustainsys-saml2 does nothing

帅比萌擦擦* 提交于 2021-02-08 10:49:43
问题 I have an .Net MVC project with SSO working. The SSO config looks like this: <system.identityModel> <identityConfiguration saveBootstrapContext="true"> <caches> <sessionSecurityTokenCache type="Vixion.IdentityModel.Cache.SharedSessionSecurityTokenCache, Vixion.IdentityModel.Cache"> <cacheServiceAddress url="http://tvwapps35434d.kpnis.nl:1008/SessionSecurityTokenCacheService.svc" /> </sessionSecurityTokenCache> </caches> <audienceUris> <add value="http://localhost:24442/" /> </audienceUris>

AuthenticateResult.Succeeded is false with Okta and Sustainsys.SAML2

烈酒焚心 提交于 2021-02-02 03:41:39
问题 I have a .Net Core 2 application which leverages Sustainsys.Saml2.AspNetCor2 (2.7.0). The front end is an Angular application. The SAML approach I'm taking is based on, and very similar to, the approach taken in this reference implementation: https://github.com/hmacat/Saml2WebAPIAndAngularSpaExample *Everything works fine with the test IDP (https://stubidp.sustainsys.com). But when we try to integrate with Okta, the AuthenticateResult.Succeeded property in the callback method (see below) is

AuthenticateResult.Succeeded is false with Okta and Sustainsys.SAML2

回眸只為那壹抹淺笑 提交于 2021-02-02 03:41:26
问题 I have a .Net Core 2 application which leverages Sustainsys.Saml2.AspNetCor2 (2.7.0). The front end is an Angular application. The SAML approach I'm taking is based on, and very similar to, the approach taken in this reference implementation: https://github.com/hmacat/Saml2WebAPIAndAngularSpaExample *Everything works fine with the test IDP (https://stubidp.sustainsys.com). But when we try to integrate with Okta, the AuthenticateResult.Succeeded property in the callback method (see below) is

Extract Sustainsys SAML 2.0 Assertion

会有一股神秘感。 提交于 2021-01-28 14:13:27
问题 I am tasked with setting up SAML 2.0 Single Sign On via the Sustainsys (Kentor) library for the project I am currently working on. Here is the documentation I have been following. The website is a webforms application so I am using the HTTPModule portion of the Sustainsys library. I have configured my IDP (Okta) to send the SAML 2.0 assertions to the website which the documentation proclaims the Endpoint to be /Saml or /Saml/Acs . The site is a Kentico CMS website and the CMS offers an API

Reading relaystate from a SamlResponse

一个人想着一个人 提交于 2021-01-27 18:22:23
问题 We are using SustainSys.Saml2 with IdentityServer4. We have the following flow working outlined in this question How to maintain returnurl after receiving SAML response from OneLogin When we issue a ChallengeAsync just before we are redirected to OneLogin to verify our user and send a SamlResponse back we see our AuthenticationProperties get passed to SustatinSys library code and it has relayData and a returnPath set but when OneLogin posts back to us the relaystate is not the returnurl