Can I use ITfoxtec saml2 to add a SAML identity provider to a non-Core website? - saml-2.0

I have an OIDC identity provider I want to extend to be a SAML2 identity provider, but it is not a .NET Core site. The test/samples only show how to configure a core app.
Is it possible to use it to make an identity provider for a non-core site?

The ITfoxtec Identity SAML2 component both support implementing a identity provider (IdP) on .NET core and .NET Framework.
Yes, there is only a .NET Core sample TestIdPCore showing how to implement an IdP. But I think you relatively easy can port the sample code to .NET Framework by looking at the .NET Framework sample TestWebApp.

Related

Incorporate WebForms Application with Azure AD for SAML based SSO authentication

I am trying to incorporate ITFoxtec SAML with my webforms applications and Azure AD for SAML based SSO authentication. Can anyone please provide me any reference link or guide me regarding this to work?
Target Framework: .NET Framework 4.8(Web forms)
I have gone through the samples given in the github repo but still unable to proceed further.https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2
I'm afraid that there is not a .NET WebForms sample but it is possible to implement ITfoxtec Identity SAML 2.0 in a .NET WebForms application.
Please se the following links:
ITfoxtec SAML 2.0 and .NET ASPX application (not MVC)
itfoxtec-identity-saml2 .net framework 4.6 web forms guidance
ITfoxtec SAML 2.0 and ASP.NET Web Forms (ASPX) HttpRequest
Alternatively, you can connect to Azure AD using OpenID Connect or use FoxIDs as an security broker to concert between the Azure AD SAML 2.0 connection and your application using OpenID Connect.

How to use itfoxtec-identity-saml2with Forgerock SSO

I am trying to use the itfoxtec-identity-saml2 code samples from Github to use as my ASP.NET client app to autenticate with Forgerock. But it seems the are no samples-code-documentation on this. Am I moving the wrong path?
Is itfoxtec-identity-saml2 even compatible with Forgerock SSO server?
ITfoxtec Identity Saml2 support SAML 2.0 and basically supports all IdPs which support SAML 2.0.
It looks like Forgerock SSO support SAML 2.0 in this guide: https://backstage.forgerock.com/docs/am/6.5/saml2-guide/
It looks

How to create a IdP with ITfoxtec

i am interested to create a IdP (Identity Provider) with SAML.
It´s possible to create a full IdP funcionalities with ITfoxtec Nuget?
Have any example with ASP.Net, c#?
Yes, it is possible to implement an IdP using the ITfoxtec Identity Saml 2.0 library. You can see an ASP.NET MVC core IdP example at https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2/tree/master/test/TestIdPCore.
I have implemented the SAML 2.0 IdP part of FoxIDs using the ITfoxtec Identity Saml 2.0 library.

Can i use episerver CMS as identity provider for SSO using SAML?

I need to do SSO between episerver CMS and Liferay CMS using SAML. I know that LifeRay can act both as Service Provider as well as Identity Provider. I want to know that can Episerver CMS also act as Identity provider as well as service provider?
EPiServer uses the standard ASP.NET provider model for authorization/authentication, and by default ships with Windows and SQL membership and role providers for forms authentication.
In other words, I'm not aware of anything particular OOTB that would enable SAML SSO. But seeing as there's nothing EPiServer-specific about authentication, you should be able to add SSO support just as you would for a vanilla ASP.NET app.

How can I specify the home realm in wpf client?

we developed applications with custom STS as identity provider. Now we planning to use thinktecture identity server (Idsrv) as primary and ADFS as secondary to replace our custom STS. I enabled WS-Federation protocol in Idsrv and added Idsrv and ADFS as identity providers. we developed web application that trusts Idsrv. I also used HRD url to show the list of identity providers whenever user access the web application. It works fine for both identity providers.
Flows :
Idsrv provider web app-->HRD-->Idsrv-->HRD--->Web app
ADFS web app-->HRD-->ADFS-->HRD--->Web app
I also specify the home realm in web application to use the identity provider as default without showing HRD. It works good.
I want to develop a wcf service that trusts Idsrv. I want to utilise the wcf service from wpf client. Based on the user's domain, I need to specify the identity provider as default.
How can I specify the identity provider in wpf client?
my requirement is same as
https://github.com/thinktecture/Thinktecture.IdentityServer.v2/issues/198
The HRD concept does not exist in WCF / SOAP. You would need to go to the idp first and then exchange that token with a token from IdSrv.
Unfortunately, we haven't implemented those endpoint in idsrv. There is a PR on github with an implementation, maybe you wanna give that a try.

Resources