search

AzureAD / azure-activedirectory-identitymodel-extensions-for-dotnet

IdentityModel extensions for .Net
MIT License
1.06k stars 402 forks source link

Saml2 protocol #1376

Closed juanan closed 4 years ago

juanan commented 4 years ago

Hi,

is there any way now to support the Saml2 protocol as in the past with Saml2AuthenticationModule?

Thanks a lot, Best regards.

brentschmaltz commented 4 years ago

@juanan seems like i forgot to save my comments, Are you specifically speaking about samlp signin envelope?

We made some changes with our envelope reader and writers that support multiple signatures as samlp envelopes are signed and contain other elements with signatures.

Yes, it is possible, but you would have some work to do. Adding @AndersAbel as he went down this road and has some experience and may be able to comment.

AndersAbel commented 4 years ago

I'm the main author and maintainer of the Sustainsys.Saml2 open source Saml2 package. There is a Saml2AuthenticationModule in the library, as well as an Owin middleware and an Asp.Net Core handler. The Saml2 library uses this (Microsoft.IdentityModel) library for the token handling.

The changes @brentschmaltz mentions were done to support some scenarios with nested signed data.

juanan commented 4 years ago

Hi, the thing is that I have to migrate an old component using Microsoft.IdentityModel.Protocols.dll v1.0 where the class Saml2AuthenticationModule was present.

My doubt appeared when I upgraded the Microsoft.IdentityModel Nuget and I noticed that this class was removed, for that I launched the question about if Saml2P was still possible.

But I guess that this part of code was in certain way moved to Sustainsys.Saml2, isn't it?

Many thanks to both @brentschmaltz and @AndersAbel.

AndersAbel commented 4 years ago

@juanan No code was moved to Sustainsys.Saml2 and the API will not be the same. But it is an HttpModule that supports Saml2P and it should be possible to replace it with the Sustainsys.Saml2.HttpModule package.

juanan commented 4 years ago

Cool, I will use the Sustainsys.Saml2.HttpModule package,

Best regards.