Questions tagged [itfoxtec-identity-saml2]
Support SAML-P for both Identity Provider (IdP) and Relying Party (RP) in ASP.NET MVC and ASP.NET MVC Core.
223
questions
1
vote
1
answer
10
views
itfoxtec-identity-saml2 , can I set the encryption algorithm while encrypt assertion?
need to know how to set encryption algorithm like what we do for signing saml response
I had looked at the configuration object, but it seems nothing related to the encryption algorithm.
1
vote
1
answer
23
views
Redirect back to AssertionConsumerService gives 302
When redirected back from NemIdLogin to AssertionConsumerService it comes with status code 302 before then being the status code 405 with GET method instead of POST...
What happened was yesterday we ...
1
vote
1
answer
28
views
itfoxtec-identity-saml2 is assertion encryption still not supported by the library?
Is it possible to encrypt the assertion response with ITfoxtec Identity Saml2?
I had looked at the examples on GitHub, but it seems there is no encryption example there.
1
vote
1
answer
37
views
AssertionConsumerService giving "Not HTTP POST Method"
I've implemented the MitId login with your nuget package. It seems to work fine until we get redirected back to the AssertionConsumerService endpoint. There I get "Not HTTP POST Method" but ...
1
vote
1
answer
17
views
ITfoxtec and .net6.0 PublishTrimmed produces a NullReferenceException
I use ITfoxtec library in order to authenticate with SAML2.0.
The project targets .Net6.0 and all was working fine until one of my colleagues decided to activate the PublishTrimmed tag inside the ....
1
vote
1
answer
42
views
itfoxtec-identity-saml2 .NET Core MVC implementation, Is there any testdata we can test the implementation with?
I’ve implemented your MitId login example for .NET Core MVC and I would really like to test the login.
Are there any test user-id’s that I can use to test with? I’ve tried a real person’s user-id but ...
1
vote
1
answer
35
views
How do I send my metadata xml file to the SAML SP I am connecting to?
I built my SAML SP Metadata file using this site:
https://www.samltool.com/sp_metadata.php
I then moved it to the cloud in a publicly accessible folder.
I set up my appsettings.json file like this:
...
1
vote
1
answer
35
views
How to use Saml2ArtifactBinding and retrieve user claims
I'm integrating my C# project with an IDP via SAML 2. I have some examples of how to create the login assertion using Saml2PostBinding, but I was not able to find any example about how to do it with ...
1
vote
1
answer
133
views
How do I configure my SAML Service Provider to send metadata to the Identity Provider?
I am using the ITfoxTec SAML library in my .Net Web API project.
I have it working with a SAML Identity Provider testing service called Okta and it's working great.
But now I need to use a corporate ...
1
vote
1
answer
41
views
How to update a User Claim after on a active SAML Session in .Net Core?
Is it possible to update a User Claim during a active SAML Session without a complete relogging to the application?
I want to change a specific claim (activeSite) that we use for authorization in ...
1
vote
1
answer
60
views
Asp.Net Core Identity with multiple SAML IDPs using ITFoxTec.Identity.Saml2
Are there any examples of using itfoxtec-identity-saml2 with asp.net core Identity.
Specifically, I have many SAML Idps (https://stubidp.sustainsys.com, Okta, Auth0, Salesforce, etc) and I want to add ...
1
vote
1
answer
91
views
Getting "Signature is invalid." when using Artifact Binding during the artifact consumption step
I have an IdP and an SP setup using the ITfoxtec SAML2 libraries, and everything works great when not using artifact binding, or when not validating signatures. When using artifact binding and ...
1
vote
1
answer
55
views
Is it possible to ignore AuthnContextClassRef?
I'm facing the following problem:
The IDP has not a valid URI in AuthnContextClassRef field, and the lib itfoxtec-identity-saml2 is throwing an error when I try to use the method:
binding....
1
vote
1
answer
40
views
Not able to signin to a WebForms using ITFoxtec
Have tried to use ITFoxtec in my webform application but getting an error as below when I click on Login. I have registered the app in my default directory of my Azure AD.
<appSettings> <add ...
1
vote
1
answer
168
views
Adding Certificate .CER to SAML2 Configuration ITfoxtec.Identity.Saml2
I'm trying to implement SSO using SAML2 and ITfoxtec.Identity.Saml2 package in my ASP.NET MVC ( .NET 6.0 ).
I have the metadata file of the IDP ( Azure AD ) and the .cer certificate file ( both given ...
1
vote
1
answer
105
views
Incorporate WebForms Application with Azure AD for SAML based SSO authentication
I am trying to incorporate ITFoxtec SAML with my webforms applications and Azure AD for SAML based SSO authentication. Can anyone please provide me any reference link or guide me regarding this to ...
1
vote
1
answer
57
views
'IServiceCollection' does not contain a definition for 'BindConfig' and no accessible extension method 'BindConfig'
Please provide the steps to resolve the BindConfig error for ITfoxTec.
I have checked this link but not able to understand the solution for this issue.
ITfoxtec BindCOnfig error - please see image
1
vote
1
answer
107
views
How to Validate Azure AD SAML 2.0 Assertion in C# using ITfoxtec Identity SAML 2.0 library
My project technology is ASP.NET Webforms (.NET framework 4.6.2).
We are using "ITfoxtec Identity SAML 2.0" library for Azure AD SAML Authentication. The sample code present in Itfoxtech ...
1
vote
1
answer
72
views
IDX13510: The Saml2SecurityToken cannot be validated because the Assertion specifies a OneTimeUse
We are recieving an exception when validating an assertion with a OneTimeUse Condition. We do not see a way to override or change this behavior. Any help?
Exception: Microsoft.IdentityModel.Tokens....
1
vote
1
answer
135
views
Error when connecting to a SAML 2.0 IdP that uses shibboleth
I am using the ITfoxtec Identity SAML 2.0 library with .Net 7 project to connect to a SAML 2.0 IdP.
I tested it first using Okta SAML and it worked great!
However, when I try another SAML 2.0 IdP that ...
1
vote
1
answer
49
views
How do I communicate with a SAML 2.0 server so that I can leverage it's authentication?
I need to set up my .Net 5 web app so that it can connect to a SAML 2.0 login server at this internal site: [login.antares.eng.edu].
I am using this library to help me: https://www.itfoxtec.com/...
1
vote
1
answer
30
views
Add other parameters to saml2 authentication requets
I try to authenticate with itfoxtec-identity-saml2 to my IDP.At first, I used asp.net webform but I need to migrate my website to asp net core mvc and i don't know how to proceed to enter theses ...
1
vote
1
answer
23
views
How to use itfoxtec-identity-saml2with Forgerock SSO
I am trying to use the itfoxtec-identity-saml2 code samples from Github to use as my ASP.NET client app to autenticate with Forgerock. But it seems the are no samples-code-documentation on this. Am I ...
1
vote
1
answer
39
views
Username Get back to calling point after successful SAML authentication
I want to get the SAML response back to the calling service when I am calling using from other web API.
I want to further validate the user in database where I am struggling any hint?
Try various ...
1
vote
2
answers
455
views
SSO logout from Microsoft Account ever where, is it possible to logout only for specific Azure AD Enterprise application?
We Implemented SSO using .Net Core 6, ITfoxtec framework (https://www.itfoxtec.com/identitysaml2) and Azure AD Enterprise application. everything is working as expected, while logging out we use ...
1
vote
1
answer
126
views
SSO logout using ITfoxtec Saml2 issue
I am new to implementing SAML2. I have had good success with using the ITfoxtec framework. I am able to connect to the IDP, login, and return back to my AssertionConsumerService successfully. The ...
1
vote
1
answer
52
views
ITfoxtec -SAML2 - read configuration values from a DB
We are using the ITfoxtec SAML2 library for Single Sign On with SAML2 authentication for some of our external Clients.
So far we only have one client that wants SSO, but we anticipate that we will get ...
1
vote
1
answer
98
views
ITFoxtec SAML2 Authentication, Blazor gets the authenticated user, but the MVC part are not
Good Day Everyone
I have this wierd happening to our application, I have a Blazor Server Side application that has a ITFoxtec as our SAML2 authentication with our global company as a provider, then I ...
1
vote
1
answer
86
views
ITfoxtec Identity SAML 2.0 - Signed LogoutRequest using POST
With reference to our previous post our customer asked us to change the SamlIdpSettings:logouturl setting to:
https://idpqa.csu.edu.au/idp/profile/SAML2/POST/SLO
but the following then occurred:
2022-...
1
vote
1
answer
34
views
Can X509SubjectName be included when signing Saml2AuthnResponse?
I've created a Saml2AuthnResponse and am passing it to Saml2PostBinding.Bind()
The X509Data node does not contain X509SubjectName although my cert obviously has one.
How can this be added?
Also, can ...
1
vote
1
answer
144
views
Unbind a request when authenticating SAML using ITofxtec
I am following this example How to Authenticate with SAML in ASP.NET Core and C#
The meat and potatoes of the SAML implementation in in the route AssertionConsumerService(). In it, there's the ...
1
vote
1
answer
148
views
ITfoxtec Identity SAML 2.0 - Signed LogoutRequest Failing
Our signed LogoutRequest is failing:
The response page contains:
Charles Sturt University.
Gateway to Charles Sturt University - Message Security Error.
The request cannot be fulfilled because the ...
1
vote
1
answer
340
views
ID4037: The key needed to verify the signature could not be resolved from the following security key identifier
I have two web applications that are getting a SAML2 SSO between them. One direction is working fine. But the other results in this error:
ID4037: The key needed to verify the signature could not be ...
1
vote
1
answer
42
views
ITfoxtec.Identity.Saml2 for Google Apps
Can we use Google custom SAML App as idp with ITfoxtec.Identity.Saml2? I have created a Google SAML app but didn't know how to find ACR Url and Entity ID.
Is there any brief example to implement SSO ...
1
vote
1
answer
96
views
Big delay when validating X509Certificate2 certificate
We are currently experiencing an issue with our ITFoxtec implementation. It takes approx. 30 seconds for the code to authenticate the user. If we try this approach on localhost, the authentication is ...
1
vote
1
answer
97
views
ITfoxtec Identity SAML 2.0 - Signed LogoutRequest
We have now implemented your excellent Identity Saml2 package for several of our customers.
However, one of our customers has written to us as follows:
LogoutRequests need to be signed (mandatory), ...
1
vote
1
answer
109
views
How to authenticate between different .Net Api's with ITfoxtec.Identity.Saml2
We have two different Api's running. One on a public server and one internal that should communicate with each other.
We used to setup SAML with AzureAD and ITfoxtec.Identity.Saml2 to authorize a the ...
1
vote
2
answers
205
views
ITFOXTEC SAML2 CORE example will not compile
I am trying to build your sample. I’ve removed all the projects down to the Test Web App Core and have added the latest SAML 2 and SAML 2 MVC packages from NuGet. I am getting a compiler error (see ...
2
votes
1
answer
287
views
Can I send Saml2AuthnRequest without subject property? 'Subject' is not supported by Azure AD
The Saml2 Authn Request include a subject property which apparently azure does not like. Is there a way of modifying the request xml to not include the subject property or any other work around?
I am ...
1
vote
1
answer
123
views
Invalid signed assertion in response
I am attempting to create a custom identity provider (based on https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2/tree/master/test/TestIdPCore) but using HTTT-POST binding. The issue I am having is ...
1
vote
1
answer
82
views
Is it possible to replay a SAML request using PostMan?
We are using Itfoxtex identity saml2 in our server application.
On my development machine I am trying to replay a SAML assertion response using PostMan up against the application running on my local ...
1
vote
0
answers
142
views
Duende IdentityServer 5.0 - Sign in user after SAML Authentication (from Users IDP)
We have :
Our own IDP --> Duende Identity Server (5.0)
MVC Client that users log into after they are authenticated by our IDP (above)
External Client that wants to have SSO to our MVC Client so ...
3
votes
2
answers
136
views
ITfoxtec BindCOnfig error - please see image
I am using the latest Library from Nuget, do I need to get the latest from GitHub?
Thanks
1
vote
1
answer
191
views
ITfoxtec Audience Validatiaon failed Did not match: validationParameters.ValidAudience:
I am getting this error using ITfoxtec
SecurityTokenInvalidAudienceException: IDX10214: Audience validation failed. Audiences: 'System.String'. Did not match: validationParameters.ValidAudience: '...
1
vote
1
answer
45
views
ITfoxtec SAML Library Services.BindConfig -- error
I am using the ITfoxtec SAML2 Library and following the example from the site
I see they have an extension method BindConfig
however, in my use of the library I am getting an error IServicesCollection ...
1
vote
1
answer
203
views
IDP initiated SAML flow with ITfoxtec
I am setting up an IDP initiated SAML authentication flow
One of our clients will send an SAML assertion request to us by clicking a link within their internal system to access our application - so we ...
1
vote
1
answer
15
views
ITfoxtec - appliesToAddress value on IdPInitiatedController
Does anyone know what the appliesToAddress variable value should be on the IdPInitiatedController of the ITfoxtec TestWebApp project?
Thanks!
1
vote
1
answer
107
views
ITFoxtec.Identity.Saml2 - TestIdpCore - How would one add a login screen?
Background:
I've been working with the ITFoxtec.Identity.Saml2 - TestIdpCore project to create a custom IdP. With a little trouble I've managed to get signed/encrypted assertions working (against the ...
1
vote
1
answer
271
views
Is it possible to use SAML V2 from Blazor WebAssembly App?
I can use easily Itfoxtec libraries to authenticate in SAML on a Blazor Server App in .Net 6.
But I don't know how to get a Blazor WebAssembly App work for SAML.
I have tried to adapt some parts like ...
2
votes
1
answer
646
views
Azure AD: getting Invalid X509 certificate chain when Unbind with itfoxtec
I am using Azure AD as ADFS and I get response from it in the ACS route, however I am getting:
AuthenticationException: Invalid X509 certificate chain. Certificate name:'CN=accounts.accesscontrol....