ITfoxtec Idp-initiated SSO to SP - saml-2.0

I am currently implementing a .NET Framework IdP using ITfoxtec Identity SAML 2.0.
I understand that the AuthController Login API endpoint in the TestIdPCore test project receives a SSO request from the SP for SP-initated SSO.
However, I don't understand how to do a IdP-initiated SSO. Any help would be much appreciated.

You can find the .NET Framework IdP-Initiated SSO sample in the TestWebApp https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2/blob/master/test/TestWebApp/Controllers/IdPInitiatedController.cs
The sample show an SP acting as an IdP.

Related

Incorporate WebForms Application with Azure AD for SAML based SSO authentication

I am trying to incorporate ITFoxtec SAML with my webforms applications and Azure AD for SAML based SSO authentication. Can anyone please provide me any reference link or guide me regarding this to work?
Target Framework: .NET Framework 4.8(Web forms)
I have gone through the samples given in the github repo but still unable to proceed further.https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2
I'm afraid that there is not a .NET WebForms sample but it is possible to implement ITfoxtec Identity SAML 2.0 in a .NET WebForms application.
Please se the following links:
ITfoxtec SAML 2.0 and .NET ASPX application (not MVC)
itfoxtec-identity-saml2 .net framework 4.6 web forms guidance
ITfoxtec SAML 2.0 and ASP.NET Web Forms (ASPX) HttpRequest
Alternatively, you can connect to Azure AD using OpenID Connect or use FoxIDs as an security broker to concert between the Azure AD SAML 2.0 connection and your application using OpenID Connect.

How to create a IdP with ITfoxtec

i am interested to create a IdP (Identity Provider) with SAML.
It´s possible to create a full IdP funcionalities with ITfoxtec Nuget?
Have any example with ASP.Net, c#?
Yes, it is possible to implement an IdP using the ITfoxtec Identity Saml 2.0 library. You can see an ASP.NET MVC core IdP example at https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2/tree/master/test/TestIdPCore.
I have implemented the SAML 2.0 IdP part of FoxIDs using the ITfoxtec Identity Saml 2.0 library.

Can we use OneLogin/Okta/Auth0 as Proxy SP between Google IdP and application

We have an application for which we would like to enable users to login into our application with their own Identity Providers like Google, ADFS etc with SAML 2.0 as protocol.
In this context our application will be SP and Identity Providers will be Google, ADFS.
But currently we don't have SAML implementation at our application, so we would like to use some platform like OneLogin/Okta/Auth0 as middle proxy between our application and IdP so that SAML related handling can be done at OneLogin/Okta/Auth0 and we need to get callback to our application with user details after success login.
Is this possible with any SASS based SAML providers? and how to do it.
Thanks in advance
Yes - connect to Auth0 / Okta via OpenID Connect and then connect the IDP to other IDP via SAML.
So in this context, Auth0 / Okta is a SAML SP.
Have a look here.

IDP that supports SAML 2.0 HTTP Artifact Binding?

I setup a demo showing SSO using Shibboleth SP3 and Azure AD as the IDP. This worked great. I am now hoping to build off this and demo HTTP Artifact bindings but this is not supported with Azure AD.
What's an IDP the supports this? Preferably as a service.
You may look at the free IdP of SSO Circle - https://www.ssocircle.com/en/idp-tips-tricks/ssocircle-how-to/
IdP meta data can be found at https://idp.ssocircle.com/

How do I implement SAML in my application

I am using a SaaS application and I want to use our own LDAP to Login to that 3rd party application. I want to provide a link to that application in my Portal. Both the applications are hosted in Cloud and are Spring based.
Please let me know where to Start and how to go about implementing SP initiated SAML.
Thanks!
First of all you need a SAML IDP that authenticates against LDAP e.g. shibboleth.
Then you need a client side SAML stack.
Refer: SAML : SAML connectivity / toolkit.
You could also look at IDaaS e.g. Auth0 or Okta.

Resources