Questions tagged [itfoxtec-identity-saml2]

Support SAML-P for both Identity Provider (IdP) and Relying Party (RP) in ASP.NET MVC and ASP.NET MVC Core.

Filter by
Sorted by
Tagged with
1 vote
1 answer
10 views

itfoxtec-identity-saml2 , can I set the encryption algorithm while encrypt assertion?

need to know how to set encryption algorithm like what we do for signing saml response I had looked at the configuration object, but it seems nothing related to the encryption algorithm.
1 vote
1 answer
23 views

Redirect back to AssertionConsumerService gives 302

When redirected back from NemIdLogin to AssertionConsumerService it comes with status code 302 before then being the status code 405 with GET method instead of POST... What happened was yesterday we ...
1 vote
1 answer
28 views

itfoxtec-identity-saml2 is assertion encryption still not supported by the library?

Is it possible to encrypt the assertion response with ITfoxtec Identity Saml2? I had looked at the examples on GitHub, but it seems there is no encryption example there.
1 vote
1 answer
37 views

AssertionConsumerService giving "Not HTTP POST Method"

I've implemented the MitId login with your nuget package. It seems to work fine until we get redirected back to the AssertionConsumerService endpoint. There I get "Not HTTP POST Method" but ...
1 vote
1 answer
17 views

ITfoxtec and .net6.0 PublishTrimmed produces a NullReferenceException

I use ITfoxtec library in order to authenticate with SAML2.0. The project targets .Net6.0 and all was working fine until one of my colleagues decided to activate the PublishTrimmed tag inside the ....
1 vote
1 answer
42 views

itfoxtec-identity-saml2 .NET Core MVC implementation, Is there any testdata we can test the implementation with?

I’ve implemented your MitId login example for .NET Core MVC and I would really like to test the login. Are there any test user-id’s that I can use to test with? I’ve tried a real person’s user-id but ...
1 vote
1 answer
35 views

How do I send my metadata xml file to the SAML SP I am connecting to?

I built my SAML SP Metadata file using this site: https://www.samltool.com/sp_metadata.php I then moved it to the cloud in a publicly accessible folder. I set up my appsettings.json file like this: ...
  • 6,026
1 vote
1 answer
35 views

How to use Saml2ArtifactBinding and retrieve user claims

I'm integrating my C# project with an IDP via SAML 2. I have some examples of how to create the login assertion using Saml2PostBinding, but I was not able to find any example about how to do it with ...
1 vote
1 answer
133 views

How do I configure my SAML Service Provider to send metadata to the Identity Provider?

I am using the ITfoxTec SAML library in my .Net Web API project. I have it working with a SAML Identity Provider testing service called Okta and it's working great. But now I need to use a corporate ...
  • 6,026
1 vote
1 answer
41 views

How to update a User Claim after on a active SAML Session in .Net Core?

Is it possible to update a User Claim during a active SAML Session without a complete relogging to the application? I want to change a specific claim (activeSite) that we use for authorization in ...
  • 407
1 vote
1 answer
60 views

Asp.Net Core Identity with multiple SAML IDPs using ITFoxTec.Identity.Saml2

Are there any examples of using itfoxtec-identity-saml2 with asp.net core Identity. Specifically, I have many SAML Idps (https://stubidp.sustainsys.com, Okta, Auth0, Salesforce, etc) and I want to add ...
1 vote
1 answer
91 views

Getting "Signature is invalid." when using Artifact Binding during the artifact consumption step

I have an IdP and an SP setup using the ITfoxtec SAML2 libraries, and everything works great when not using artifact binding, or when not validating signatures. When using artifact binding and ...
1 vote
1 answer
55 views

Is it possible to ignore AuthnContextClassRef?

I'm facing the following problem: The IDP has not a valid URI in AuthnContextClassRef field, and the lib itfoxtec-identity-saml2 is throwing an error when I try to use the method: binding....
1 vote
1 answer
40 views

Not able to signin to a WebForms using ITFoxtec

Have tried to use ITFoxtec in my webform application but getting an error as below when I click on Login. I have registered the app in my default directory of my Azure AD. <appSettings> <add ...
1 vote
1 answer
168 views

Adding Certificate .CER to SAML2 Configuration ITfoxtec.Identity.Saml2

I'm trying to implement SSO using SAML2 and ITfoxtec.Identity.Saml2 package in my ASP.NET MVC ( .NET 6.0 ). I have the metadata file of the IDP ( Azure AD ) and the .cer certificate file ( both given ...
  • 455
1 vote
1 answer
105 views

Incorporate WebForms Application with Azure AD for SAML based SSO authentication

I am trying to incorporate ITFoxtec SAML with my webforms applications and Azure AD for SAML based SSO authentication. Can anyone please provide me any reference link or guide me regarding this to ...
1 vote
1 answer
57 views

'IServiceCollection' does not contain a definition for 'BindConfig' and no accessible extension method 'BindConfig'

Please provide the steps to resolve the BindConfig error for ITfoxTec. I have checked this link but not able to understand the solution for this issue. ITfoxtec BindCOnfig error - please see image
1 vote
1 answer
107 views

How to Validate Azure AD SAML 2.0 Assertion in C# using ITfoxtec Identity SAML 2.0 library

My project technology is ASP.NET Webforms (.NET framework 4.6.2). We are using "ITfoxtec Identity SAML 2.0" library for Azure AD SAML Authentication. The sample code present in Itfoxtech ...
1 vote
1 answer
72 views

IDX13510: The Saml2SecurityToken cannot be validated because the Assertion specifies a OneTimeUse

We are recieving an exception when validating an assertion with a OneTimeUse Condition. We do not see a way to override or change this behavior. Any help? Exception: Microsoft.IdentityModel.Tokens....
  • 11
1 vote
1 answer
135 views

Error when connecting to a SAML 2.0 IdP that uses shibboleth

I am using the ITfoxtec Identity SAML 2.0 library with .Net 7 project to connect to a SAML 2.0 IdP. I tested it first using Okta SAML and it worked great! However, when I try another SAML 2.0 IdP that ...
  • 6,026
1 vote
1 answer
49 views

How do I communicate with a SAML 2.0 server so that I can leverage it's authentication?

I need to set up my .Net 5 web app so that it can connect to a SAML 2.0 login server at this internal site: [login.antares.eng.edu]. I am using this library to help me: https://www.itfoxtec.com/...
  • 6,026
1 vote
1 answer
30 views

Add other parameters to saml2 authentication requets

I try to authenticate with itfoxtec-identity-saml2 to my IDP.At first, I used asp.net webform but I need to migrate my website to asp net core mvc and i don't know how to proceed to enter theses ...
1 vote
1 answer
23 views

How to use itfoxtec-identity-saml2with Forgerock SSO

I am trying to use the itfoxtec-identity-saml2 code samples from Github to use as my ASP.NET client app to autenticate with Forgerock. But it seems the are no samples-code-documentation on this. Am I ...
1 vote
1 answer
39 views

Username Get back to calling point after successful SAML authentication

I want to get the SAML response back to the calling service when I am calling using from other web API. I want to further validate the user in database where I am struggling any hint? Try various ...
  • 11
1 vote
2 answers
455 views

SSO logout from Microsoft Account ever where, is it possible to logout only for specific Azure AD Enterprise application?

We Implemented SSO using .Net Core 6, ITfoxtec framework (https://www.itfoxtec.com/identitysaml2) and Azure AD Enterprise application. everything is working as expected, while logging out we use ...
1 vote
1 answer
126 views

SSO logout using ITfoxtec Saml2 issue

I am new to implementing SAML2. I have had good success with using the ITfoxtec framework. I am able to connect to the IDP, login, and return back to my AssertionConsumerService successfully. The ...
1 vote
1 answer
52 views

ITfoxtec -SAML2 - read configuration values from a DB

We are using the ITfoxtec SAML2 library for Single Sign On with SAML2 authentication for some of our external Clients. So far we only have one client that wants SSO, but we anticipate that we will get ...
  • 169
1 vote
1 answer
98 views

ITFoxtec SAML2 Authentication, Blazor gets the authenticated user, but the MVC part are not

Good Day Everyone I have this wierd happening to our application, I have a Blazor Server Side application that has a ITFoxtec as our SAML2 authentication with our global company as a provider, then I ...
1 vote
1 answer
86 views

ITfoxtec Identity SAML 2.0 - Signed LogoutRequest using POST

With reference to our previous post our customer asked us to change the SamlIdpSettings:logouturl setting to: https://idpqa.csu.edu.au/idp/profile/SAML2/POST/SLO but the following then occurred: 2022-...
1 vote
1 answer
34 views

Can X509SubjectName be included when signing Saml2AuthnResponse?

I've created a Saml2AuthnResponse and am passing it to Saml2PostBinding.Bind() The X509Data node does not contain X509SubjectName although my cert obviously has one. How can this be added? Also, can ...
1 vote
1 answer
144 views

Unbind a request when authenticating SAML using ITofxtec

I am following this example How to Authenticate with SAML in ASP.NET Core and C# The meat and potatoes of the SAML implementation in in the route AssertionConsumerService(). In it, there's the ...
1 vote
1 answer
148 views

ITfoxtec Identity SAML 2.0 - Signed LogoutRequest Failing

Our signed LogoutRequest is failing: The response page contains: Charles Sturt University. Gateway to Charles Sturt University - Message Security Error. The request cannot be fulfilled because the ...
1 vote
1 answer
340 views

ID4037: The key needed to verify the signature could not be resolved from the following security key identifier

I have two web applications that are getting a SAML2 SSO between them. One direction is working fine. But the other results in this error: ID4037: The key needed to verify the signature could not be ...
  • 2,178
1 vote
1 answer
42 views

ITfoxtec.Identity.Saml2 for Google Apps

Can we use Google custom SAML App as idp with ITfoxtec.Identity.Saml2? I have created a Google SAML app but didn't know how to find ACR Url and Entity ID. Is there any brief example to implement SSO ...
1 vote
1 answer
96 views

Big delay when validating X509Certificate2 certificate

We are currently experiencing an issue with our ITFoxtec implementation. It takes approx. 30 seconds for the code to authenticate the user. If we try this approach on localhost, the authentication is ...
1 vote
1 answer
97 views

ITfoxtec Identity SAML 2.0 - Signed LogoutRequest

We have now implemented your excellent Identity Saml2 package for several of our customers. However, one of our customers has written to us as follows: LogoutRequests need to be signed (mandatory), ...
1 vote
1 answer
109 views

How to authenticate between different .Net Api's with ITfoxtec.Identity.Saml2

We have two different Api's running. One on a public server and one internal that should communicate with each other. We used to setup SAML with AzureAD and ITfoxtec.Identity.Saml2 to authorize a the ...
  • 407
1 vote
2 answers
205 views

ITFOXTEC SAML2 CORE example will not compile

I am trying to build your sample. I’ve removed all the projects down to the Test Web App Core and have added the latest SAML 2 and SAML 2 MVC packages from NuGet. I am getting a compiler error (see ...
2 votes
1 answer
287 views

Can I send Saml2AuthnRequest without subject property? 'Subject' is not supported by Azure AD

The Saml2 Authn Request include a subject property which apparently azure does not like. Is there a way of modifying the request xml to not include the subject property or any other work around? I am ...
1 vote
1 answer
123 views

Invalid signed assertion in response

I am attempting to create a custom identity provider (based on https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2/tree/master/test/TestIdPCore) but using HTTT-POST binding. The issue I am having is ...
1 vote
1 answer
82 views

Is it possible to replay a SAML request using PostMan?

We are using Itfoxtex identity saml2 in our server application. On my development machine I am trying to replay a SAML assertion response using PostMan up against the application running on my local ...
  • 321
1 vote
0 answers
142 views

Duende IdentityServer 5.0 - Sign in user after SAML Authentication (from Users IDP)

We have : Our own IDP --> Duende Identity Server (5.0) MVC Client that users log into after they are authenticated by our IDP (above) External Client that wants to have SSO to our MVC Client so ...
  • 169
3 votes
2 answers
136 views

ITfoxtec BindCOnfig error - please see image

I am using the latest Library from Nuget, do I need to get the latest from GitHub? Thanks
  • 169
1 vote
1 answer
191 views

ITfoxtec Audience Validatiaon failed Did not match: validationParameters.ValidAudience:

I am getting this error using ITfoxtec SecurityTokenInvalidAudienceException: IDX10214: Audience validation failed. Audiences: 'System.String'. Did not match: validationParameters.ValidAudience: '...
  • 169
1 vote
1 answer
45 views

ITfoxtec SAML Library Services.BindConfig -- error

I am using the ITfoxtec SAML2 Library and following the example from the site I see they have an extension method BindConfig however, in my use of the library I am getting an error IServicesCollection ...
  • 169
1 vote
1 answer
203 views

IDP initiated SAML flow with ITfoxtec

I am setting up an IDP initiated SAML authentication flow One of our clients will send an SAML assertion request to us by clicking a link within their internal system to access our application - so we ...
  • 169
1 vote
1 answer
15 views

ITfoxtec - appliesToAddress value on IdPInitiatedController

Does anyone know what the appliesToAddress variable value should be on the IdPInitiatedController of the ITfoxtec TestWebApp project? Thanks!
1 vote
1 answer
107 views

ITFoxtec.Identity.Saml2 - TestIdpCore - How would one add a login screen?

Background: I've been working with the ITFoxtec.Identity.Saml2 - TestIdpCore project to create a custom IdP. With a little trouble I've managed to get signed/encrypted assertions working (against the ...
  • 61
1 vote
1 answer
271 views

Is it possible to use SAML V2 from Blazor WebAssembly App?

I can use easily Itfoxtec libraries to authenticate in SAML on a Blazor Server App in .Net 6. But I don't know how to get a Blazor WebAssembly App work for SAML. I have tried to adapt some parts like ...
2 votes
1 answer
646 views

Azure AD: getting Invalid X509 certificate chain when Unbind with itfoxtec

I am using Azure AD as ADFS and I get response from it in the ACS route, however I am getting: AuthenticationException: Invalid X509 certificate chain. Certificate name:'CN=accounts.accesscontrol....
  • 67

1
2 3 4 5