Sustainsys / Saml2

Saml2 Authentication services for ASP.NET
Other
952 stars 600 forks source link

Authentication with idP goes into a loop #1249

Closed hdsandeep closed 2 years ago

hdsandeep commented 3 years ago

Hi,

We have a Web forms application built on .Net Framework 4.5, where we are trying to integrate SSO through Okta as idP. Currently using Kentor Authservices HttpModule version 0.21.1, as we could not use Sustainsys.Saml2.HttpModule from Nuget - where we run into an issue with description "Could not install package 'Sustainsys.Saml2 2.7.0'. You are trying to install this package into a project that targets '.NETFramework,Version=v4.5', but the package does not contain any assembly references or content files that are compatible with that framework. For more information, contact the package author."

The configuration was setup as per recommendations in the documents section and as per #306 The issue is that when the application is run, it authenticates with idP and returns the correct claim for the user and then goes into a loop of authenticating with idP and returning the claim. The issue is very similar to #157, but the resolution to that issue does not work with my application.

The SAML tracing is attached, for your reference. Can you please help us to troubleshoot this issue?

Regards, Sandeep SAMLTracer

Non Security Issues

Information needed

  1. What nuget packages are you using --> Kentor.AuthServices.HttpModule v0.21.1
  2. What is the expected behaviour --> Once the authentication is established with idP, the user session should be set and the application should open the landing page.
  3. What happens instead. In the case of an exception, this includes the exception type, complete exception message (personal information may be redacted) and a stack trace. --> After authentication with idP, the process of authentication is repeated in loops and the application start page never gets called.