207
questions
0
votes
1
answer
54
views
Sustainsys.Saml2 No cookie preserving state from the request was found
I've run into an issue using Sustainsys.Saml2 library to authenticate to MS Entra using Saml2. This question seems to have been asked many times. I've looked through many online posts with the same ...
1
vote
0
answers
15
views
Could not load type 'Sustainsys.Saml2.WebSso.Saml2Module' from assembly 'Sustainsys.Saml2'
"I'm implementing SSO login using SAML authentication with Okta as the Identity Provider (IDP) in a **.NET Framework 4.8.1 **web API application. After setting up the Assertion Consumer Service (...
0
votes
0
answers
50
views
Unable to redirect to internal url after login using Sustainsys SAML 2.0 library for ASP.NET Core 8 MVC app
I'm using the AspNetCore2 package of Sustainsys libraries for my new ASP.NET Core 8.0 MVC web app. After successful login on the IDP Sign-On page, the application is stuck in a loop stating that ...
-1
votes
1
answer
59
views
Sustainsys.Saml2.WebSso issue with request.ToHttpRequestData() after an update
I am in the process of upgrading the following packages from 1.0.0 to 1.0.3
as I see 1.0.0 is deprecated.
Sustainsys.Saml2 and Sustainsys.Saml2.Mvc
Once updated, I ran an issue where the following ...
0
votes
1
answer
105
views
Sustainsys.saml2: IDX10214: Audience validation failed. Did not match: validationParameters.ValidAudience
I am implementing sustainsys.saml2, working with Framework 4.7.2, to connect to a identity provider in Azure Ad.
Sustainsys.Saml2-2.9.2
Sustainsys.Saml2.HttpModule-2.9.2
Is there any configuration ...
0
votes
0
answers
97
views
sustainsys.saml2 http handler doesn't redirect to sing on url in my ASP.NET app
Instead of redirecting to "signOnUrl" my app redirects to the same login.aspx (start page) and I see Access Denied error. I use Pingfederate as Identity Provider. I have the following ...
0
votes
0
answers
39
views
sustainsys | multiple idp | challenge
I am developping a application in .net c# (not netcore). This application is using sustainsys library to create multiple saml2 idps. I am adding the IdentityProvider's in startup.auth.cs->...
0
votes
0
answers
372
views
Trouble with ACS URL Redirection in Sustainsys.Saml2 with OneLogin and .NET 6 Blazor
I'm working on integrating SAML2 Single Sign-On (SSO) in my .NET 6 Blazor application using the Sustainsys.Saml2 library (Sustainsys.Saml2.AspNetCore2). I've set up OneLogin as my Identity Provider (...
0
votes
1
answer
388
views
Signature error when authenticating with adfs using sustainsys.saml2 package
I’m trying to implement ADFS SSO authentication for my ASP.NET Core app using sustainsys.saml2.
When I go to my login controller it redirects to the ADFS server and then I login via the adfs login ...
2
votes
1
answer
480
views
CORS Error when trying to authenticate using ADFS on asp.net core 3 spa
I have an application built with ASP.NET Core 3, with a react SPA (the application has a useSpa for the react app and the backend is the BL of the application).
Currently the application ...
0
votes
0
answers
98
views
The signature verified correctly with the key contained in the signature, but that key is not trusted - sustainsys-saml2
I run into an issue sustainsys-saml2 configured with Azure Ad.
my web.config looks like this :
<!--SAML-->
<sustainsys.saml2 entityId="https://conquetev2.pre.espacegsf.net/saml2"...
1
vote
0
answers
120
views
Implementing Single Logout (SLO) with Sustainsys.Saml2 in ASP.NET MVC
I'm working on an ASP.NET MVC application that uses the Sustainsys.Saml2.Owin library for SAML 2.0 Single Sign-On (SSO) with Salesforce as the Identity Provider (IdP). SSO is working fine, but now I ...
1
vote
3
answers
571
views
SAML2 SSO Authentication Issue - HTTP Error 401.0 - Unauthorized
I'm encountering a problem with SAML2 Single Sign-On (SSO) authentication in my ASP.NET application. The application is set up to load the Home/Index page on startup. If the user is not authenticated, ...
0
votes
1
answer
87
views
how to set ForceAuthentication value during the runtime using Sustainsys Saml2AuthenticationRequest
We register AuthenticationScheme and SAML2Options in startup.cs (.net6 project). During the registration, we set ForceAuthentication = false because the IDP we integrate with has a different login ...
0
votes
0
answers
298
views
Sustainsys SAML2 not signing in after first successful user sign in
We're using Sustainsys's SAML2 component (the OWIN one) to integrate with Okta.
(These are older apps and we were previously using the Kentor HttpModule for authentication but have needed to upgrade ...
0
votes
1
answer
219
views
User getting frequently logged out using Sustainsys SAML and ASP.NET Session Cookies
I am facing a weird issue with one of our clients where users are getting logged out after few seconds(after placing 10-15 requests) of login. We are using following
Sustainsys.Saml2.Owin 2.3.0 ...
0
votes
1
answer
330
views
Sustainsys Saml2 return 404 when call back from iDP on route Saml2/Acs
I have the following property:
IDP: Azure AD
Service Provider: .Net 6 ( with IdentityServer4)
I was able to read Identity providers from the database instead of adding in the startup.cs like .AddSaml2(...
0
votes
1
answer
137
views
SSO Exempt Page for Blazor application using Sustainsys.Saml2
We have created a Blazor application built using .NET 6.0 and Susstainsys.Saml2 2.9.0 for SSO using SAML 2 to our WSO2 server. Everything is working as expected in that every page is SSO protected. ...
1
vote
0
answers
117
views
Sustainsys.Saml2 in MVC 5 application, how can we implement multitenancy properly?
We're using Sustainsys.Saml2 in our multi-tenant MVC 5 application. It's working fine for a single tenant at the moment, but we can't work out how to add additional tenants. The web.config has this...
...
1
vote
0
answers
236
views
Multiple Sustainsys saml2 configuration in Asp.Net core
I have added multiple same2 configuration and its working fine for the first one but not working with second configuration.
I have multiple Saml configuration with different schema as below.
.AddSaml2(...
0
votes
2
answers
260
views
Sustainsys.Saml2 MVC multitenant implementation in .NET 4.8 IDX10214: Audience validation failed
We recently migrated our applications from BasicAuth to SAML2. So we have a multitenant MVC implementation in .NET 4.8 of Sustaninsys.SAML2 which is working fine on low load. But if many users sign in ...
0
votes
1
answer
739
views
Set up Sustainsys.Saml2 configuration in Web.config programmatically
I'm trying to set up Sustainsys' Saml2 integration in an ASP.NET MVC 4 application. However, I need the identity provider options (such as Entity ID, sign-on URL, logout URL, signing certificate, ...
0
votes
1
answer
96
views
Is it possible to load Saml2AuthenticationModule inside global.asax instead of web.config
Is it possible to load sustainsys Sustainsys.Saml2.HttpModule.Saml2AuthenticationModule inside global.asax instead of web.config?
Have anybody succeeded?
0
votes
1
answer
453
views
Saml2 Sustainsys return 404 when call back from iDP on route Saml2/Acs
I have the following property:
IDP: Azure
Service Provider: .Net core 6
Client: Vue 3
and following code:
var samlConfiguration = GetConfiguration<SamlConfiguration>(configuration);
...
1
vote
0
answers
333
views
Issue Connecting to ADFS using SAML2 protocol (using Sustainsys.Saml2.Owin package)
I'm new to SAML 2.0 signing protocol.
Currently in my MVC application I'm using WS federation as signing protocol, now I have to use SAML 2.0 signing protocol.
Our IDP is ADFS and AUTH Plugin is ...
0
votes
0
answers
1k
views
Configuring the AuthnRequest with Sustainsys.Saml2.AspNetCore2
Related example: https://github.com/Sustainsys/Saml2.Samples/tree/main/v2/AspNetCore
My SAML configuration is below. Basically, I think I need the AuthnRequest to have some additional elements for the ...
1
vote
1
answer
275
views
Generate SAML assertion with .NET
I need to generate a SAML assertion to be used with an SAP app. Is there anyway to generate a SAML assertion and sign it with a private key within .NET Framework or .NET Core?
I thought I saw ...
1
vote
1
answer
506
views
Sustainsys.Saml2.AspNetCore2 - User, claims are null after coming back from IdP
I am attempting to hook up Sustainsys.Saml2 in a new .NET Core project, but having some issues with the User/claims being null after the ACS call completes.
Going to list out the packages I'm using, ...
0
votes
1
answer
177
views
Setup Azure AD External Identity Provider for SSO with ASP.NET core
I know how to add external provider using .net Core Identity for Google, But i couldn't get any example to implement for Azure AD SSO using SAML2.So far i know we can use Sustainsys library to ...
0
votes
1
answer
343
views
Set AttributeConsumingService index?
I'am doing an connection to IDP with sustainsys SAML2 with the Saml2AuthenticationModule and Sustainsys.Saml2.HttpModule
Since I want metadata returned I need to set
AttributeConsumingService index ...
1
vote
1
answer
184
views
How is expiration of the token/cookie determined?
I'm using the 'Sustainsys.Saml2' package for creating an SSO flow with an IDP.
The authentication cookie has no visible "Expires /Max-Age" in the browser but instead it shows 'Session'. This ...
0
votes
1
answer
200
views
Cannot Logout from IdentityServer 4 through Azure SAML logout request
Context
I have a Service Provider (SP) based on IdentityServer 4 and Sustainsys.Saml2.AspNetCore2 that is configured to use Azure as an IdP (SAML2).
I also have a SPA with an api that connects to my ...
0
votes
0
answers
552
views
IdentityServer SSO with oidc and saml(Azure AD)
Current state:
ASP.NET Core 6 MVC - BoatsApp
ASP.NET Core 6 MVC - CarsApp
ASP.NET Core 6 MVC app - Duende Identity Server - IdS
I'm able to achieve Single Sign-On with use of oidc.
Next, on IdS I ...
0
votes
1
answer
246
views
SustainSys duplicates Asp.net session cookie
I am trying to create a Saml sign request using Sustainsys library(v2.2) .HttpResponse already has the SessionId and while adding the Saml2 Cookie using the below code.The Already existing Session id ...
0
votes
1
answer
939
views
Reply Url from AzureAD - how to retrieve SAMLResponse
I have a Single Sign-In workflow based on Azure AD.
My project is build in .NET Core 6 + Sustainsys.Saml2.AspNetCore2.
I'm able to authenticate via Azure AD, that is:
pass my Email in MS Sign in -->...
0
votes
1
answer
531
views
Sustainsys.Saml2 multitenant implementation with app.Map()
I have multi tenant application where each tenant can use different IdP to authenticate. Below code correctly redirects to IdP but problem is to get back the response to ACS endpoint.
Key is the ...
0
votes
1
answer
547
views
Sustainsys/Saml2 - Other authentication along with SAML2 (mixed authentication)
Previously our web application (NET Framework 4.8) was using Windows Authentication, then we switched to Sustainsys/Saml2 with Startup.cs and OWIN to login.
It turns out that SAML login cannot be used ...
1
vote
1
answer
3k
views
Sustainsys.Saml2 - Saml2/Acs endpoint returns Error 500 when processing SSO
I've created a C# ASP .Net Core 6.0 application, and trying to implement SSO with Azure AD using Sustainsys.Saml2, specifically with the Sustainsys.Saml2.AspNetCore2 package. Having tested the ...
0
votes
1
answer
759
views
Sustainsys Saml2 start authentication for ASP.NET Web Forms Example
I found the information below to start auth for web forms from Anders Abel. I can't find any actual example code anywhere on how to use the HttpModule to start the auth redirect. Can someone provide ...
0
votes
1
answer
388
views
SustainSys Saml2 v2.9 Publish multiple AssertionConsumerService URLs in Metadata
We are working on upgrading from v1.0.2 to v2.9.0. With the old version, we were able to publish multiple assertion consumer service URLs by making changes to the Saml2AuthenticationOptions....
1
vote
1
answer
137
views
Setting AcceptUnsignedLogoutResponses in web.config for Sustainsys.Saml2
I'm trying to enable this AcceptUnsignedLogoutResponses setting that was added here https://github.com/Sustainsys/Saml2/commit/22f1605eba659641a5a46edb20458b1b050c93af in order to handle Identity ...
1
vote
1
answer
263
views
Upgrading SustainSys.Saml2 from v1 to v2 - Set Audience Restriction
Our identity server uses identity server 3 and implements sustainsys.saml2 for SAML integration. We have made an effort to move from v1 to v2 of the SustainSys.Saml2 NuGets. With v1, we explicitly set ...
1
vote
1
answer
90
views
Log sustainsys decrypted assertion
I'm using HttpModule v1.0.2 in a web form application in .NET 4.
I would like to log the decrypted assertion for debugging purpose, how can I do it?
The SpOptions.Logger log only the ...
0
votes
1
answer
745
views
Is it possible to use Sustainsys.SAML2 without ASP.NET cookie authentication?
I'm trying to implement SAML as service provider in our ASP.NET 4x application using Sustainsys SAML2 but I'm starting to wonder if this is the right way to go.
The application is technically ASP.NET ...
2
votes
2
answers
1k
views
Multiple IdPs with Sustainsys.Saml2 for the HTTPModule and AspNetCore
In a previous post (Sustainsys.SAML2 with a multitenant application) I asked about the process of adding multiple IdPs to my configuration. I have that working but need a little help on implementing ...
5
votes
2
answers
2k
views
Sustainsys.SAML2 with a multitenant application
I am working on a Blazor application that is a multitenant app.
I am using the Sustainsys.Saml2.AspNetCore2 package.
I have a test Blazor application working that can authorize against the test https:/...
0
votes
0
answers
515
views
IDP initiated flow with sustainsys.saml2 redirects back to idp
I am using sustainsys library for IDP as well sp initiated flow.
In our implementation we are having multiple authentication schemes registered.
in IDP initiated flow we are directly hitting ...
3
votes
1
answer
259
views
ASP.Net Identity with SAML Integration
We have an existing MVC app using the ASP.Net Identity Framework to store user logins/passwords/roles/etc... in a local SQL database. We would like to move the authentication portion of the identity ...
0
votes
1
answer
247
views
Accessing Certificate Programatically for SAML2
Setup:
I have a .Net Framework WebForms app and just setup SAML2 using Sustainsys.Saml2 setup on Azure. I'm also using Git for version control (VC) and Azure Key Vault for App Settings and Connection ...
0
votes
0
answers
365
views
AWS SSO with Sustainsys/Saml2
While configuring AWS SSO SAML 2.0 application by default it does not include and NameIdFormat and if we go with this default metadata for our Service Provider, Sustainsys/Saml2 giving error like ...