All Questions
24
questions
0
votes
1
answer
43
views
First IDP initiated SSO fails after the SAML application pool is restarted
I restarted SAML Application pool then try to login through SAML and i get a error message for the first time, but from 2nd time it works fine. In meanwhile, First IDP initiated SSO fails after the ...
0
votes
1
answer
705
views
Can we use both JWT and SAML2 in one .Net core application
We have a .net core application using traditional login with JWT bearer token mechanism, Now I have to give another option to use Azure SSO through SAML2. So login page will include another option ...
1
vote
1
answer
132
views
Wrong Issuer in ClaimsIdentity on Itfoxtec binding
Our web api gets the SAML response from the Idp, and when we run the following code:
var binding = new Saml2PostBinding();
var saml2AuthnResponse = new Saml2AuthnResponse(config);
var httpRequest = ...
2
votes
1
answer
1k
views
Handling authentication without a cookie
Our team is using Itfoxtec as the saml2 handler in our SP as follows:
A client clicks on the link of the login API.
The API redirects the user to the IdP login page.
On successful login, The API gets ...
2
votes
1
answer
396
views
Sign in an Authenticated User from External SP with SAML SSO using ITfoxtec to the managed SP
My team is tasked with implementing SSO into our web application (full .net 4.8 hosted in Azure). However, we need to rely on authentication of an external application.
A bit of context. Imagine there ...
1
vote
1
answer
100
views
SAML2.0 With Ping server with C# .Net
I am new to SAML2 with PING I can't able to find any documents how to implement this one. Is there any step by step documents or examples to implement SAML with C# .Net.
I want to create metadata ...
1
vote
2
answers
759
views
Converting from SP initiated SSO to IdP initiated SSO
I am a complete novice at SSO, so please let me know if my question doesn't make sense. Our internal system currently supports SP-initiated SSO. We have completed one successful integration with a ...
0
votes
1
answer
2k
views
Generating assertion signature with private key and certificate?
I've been give a private key, public key and a certificate to try and generate a signature for an SSO application, I've been struggling with this for a while now and I've think I've finally managed to ...
1
vote
0
answers
88
views
.NET using multiple provider SSO, How can I determine which authentication method is being used?
I have a .NET application that uses many different authentication methods including NTLM and SAML. Inside my ExternalLoginCallback I need to determine which method is being used and I am currently ...
3
votes
1
answer
3k
views
Cause of infinite redirects loop between IDP and SP
I am troubleshooting the problem related to infinite redirects with Kentor Authservices on SP side and Shibboleth clone on IDP side. My question is what could be the possible causes of this and how ...
0
votes
1
answer
432
views
Single sign out using Kentor assemblies
Kentor provides the implementation to initiate single sign-out from SP.
However, in the latest Kentor assemblies the binding for sending the logout request is always HttpRedirect.
However, the ...
0
votes
1
answer
112
views
SSOCircle URL List
I was able to get my metadata imported into SSOCircle for my sample application. From there I can get my Spring-based application running. However, I am trying to write this in a different language ...
2
votes
1
answer
528
views
Kentor.AuthServices configuring thumbprint validation
How do I configure Kentor.AuthServices to use the issuer registry from WIF? Specifically, to check based on thumbprint like in the example below:
<system.identityModel>
<...
2
votes
2
answers
2k
views
Can WIF Saml2SecurityTokenHandler validate top-level signature?
See this (stripped-down) SAML 2.0 response:
<samlp:Response>
<saml:Issuer xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion">lkasjdflkasj</saml:Issuer>
<Signature xmlns="http:...
1
vote
1
answer
2k
views
WIF config: issuerNameRegistry vs. certificateValidation
In the Windows Identity Foundation (WIF) 4.5 config, what is the relationship between issuerNameRegistry and certificateValidation? What portion of a SAML 2.0 assertion is validated by each?
For ...