sustainsys-saml2

Not able to SignOut using Saml2 from Sustainsys

断了今生、忘了曾经 提交于 2020-07-09 14:00:47
问题 This should be redirecting my app to my AdFs signOut Page, and then redirect me back to my app. However, it simply redirects me to my route "/logout". Watching the log on my ADFS server nothing happens. [AllowAnonymous] [HttpGet] [Route("api/logout")] public async Task<IActionResult> Logout() { return SignOut(new AuthenticationProperties() { RedirectUri = "/logout" }, Saml2Defaults.Scheme); } SignIn works fine. I even tried this same approach, but does not work. Here, the ReturnUrl method

How to Retrieve Claims from Idp-Initiated Login Using Sustainsys Saml2?

随声附和 提交于 2020-05-16 01:13:30
问题 I am trying to add support for SAML authentication to an ASP.NET Core MVC application with ASP.NET Core Identity (not IdentityServer). The flow "works" when testing with StubIdp - the SAMLResponse is POSTed to /Saml2/Acs and I'm redirected to the app with an Identity.External cookie, but my ClaimsPrincipal is empty and unauthenticated. Even if I use the NameID of a user who already exists in the database, the claims are completely empty. I also see the following in the console log: Sustainsys

How to Retrieve Claims from Idp-Initiated Login Using Sustainsys Saml2?

喜你入骨 提交于 2020-05-16 01:13:19
问题 I am trying to add support for SAML authentication to an ASP.NET Core MVC application with ASP.NET Core Identity (not IdentityServer). The flow "works" when testing with StubIdp - the SAMLResponse is POSTed to /Saml2/Acs and I'm redirected to the app with an Identity.External cookie, but my ClaimsPrincipal is empty and unauthenticated. Even if I use the NameID of a user who already exists in the database, the claims are completely empty. I also see the following in the console log: Sustainsys

Identity Server Saml2AuthExtensions Idp initiated SSO

空扰寡人 提交于 2020-01-16 14:53:48
问题 We currently have our identity server setup with Sustainsys/Saml2 extensions to allows 3 party clients to login to our product via sso, where the request is initiated by the client hitting our login page to start the request. We now have a customer you want to put a link into there own software to start the process, creating a ldp initiated request. My question is how do i go about implementing this using identity server and the Saml2AuthExtensions. I've had a look and i cant see anything

Dynamically add a SAML2 authentication provider using Sustainsys.Saml2 in ASP.NET Core

故事扮演 提交于 2019-12-24 06:34:43
问题 I'm trying to dynamically add a SAML2 authentication scheme using IAuthenticationSchemeProvider in ASP.NET Core and the Sustainsys.Saml2 library: schemeProvider.AddScheme(new AuthenticationScheme("myAuthScheme", "myAuthScheme", typeof(Saml2Handler))); Along with the scheme, I need to configure the Saml2Options that go along with it. I'm attempting to do this using IOptionsMonitorCache<Saml2Options> like so: samlOptionsCache.TryAdd("myAuthScheme", options); When I then attempt to authenticate

Add SAML Authentication to .net WebAPI

房东的猫 提交于 2019-12-24 06:34:30
问题 I need to add SAML Authentication to my web application (WebAPI Back-End / Angular Front-End) with Azure AD as my Identity Provider. I plan to use Sustainsys.Saml2 library but I'm not sure how to correctly use the methods that the library provide. I already added my web app as an the Enterprise Application on Azure AD and performed the necessary SSO SAML configurations. I have configured sustainsys in the web.config as following: <sustainsys.saml2 entityId="https://myWebApp/api/saml/login"

Sustainsys SAML2 Sample for ASP.NET Core WebAPI without Identity

最后都变了- 提交于 2019-12-07 11:55:20
问题 Does anyone have a working sample for Sustainsys Saml2 library for ASP.NET Core WebAPI only project (no Mvc) and what's more important without ASP Identity? The sample provided on github strongly relies on MVC and SignInManager which I do not need nor want to use. I added Saml2 authentication and at first it worked fine with my IdP (I also checked the StubIdP provided by Sustainsys) for first few steps so: IdP metadata get properly loaded My API properly redirects to sign-in page Sign-in page