ASP.NET OAuth Single Sign-On (SSO) with SwissID as IDP

ASP.NET OAuth Single Sign-On (SSO) module gives the ability to enable OAuth Single Sign-On for your ASP.NET applications. Using Single Sign-On you can use only one password to access your ASP.NET application and services. Our module is compatible with all the OAuth compliant identity providers. Here we will go through a step-by-step guide to configure Single Sign-On (SSO) between ASP.NET and SwissID considering SwissID as an OAuth provider.

Pre-requisites: Download And Installation

• Download miniOrange ASP.NET OAuth 2.0 Module.
• For Setting up the connector, extract the asp-net-oauth-sso-module.zip, you will find a DLL file miniorange-oauth-sso.dll, a configuration file oauthsso.config and a integration.md file which contain the steps for adding the module into your application.
• Add miniorange-oauth-sso.dll in bin folder (where your other DLL files exists) for your application.
• Register miniorangeoauthsso module in your application according to the provided steps in the integration.md file.
• Add the provided configuration file oauthsso.config in the root directory for your application.
• After integration open browser and browse the connector dashboard with URL below:
  https:// <your-application-base-url>/?ssoaction=config
• If it pop up the registration page or login page, you have successfully added the miniOrange oauth sso connector for your application.

• Register or Login for configuring the connector.

Steps to configure ASP.NET OAuth Single Sign-On (SSO) using SwissID as IDP

1. Configure SwissID as identity provider

• Go to developer account of SwissID and sign up/login.
• Click on Add Application to create a new application.
• Enter the app name and click on Save Button.
• From Plugin Settings in ASP.NET OAuth plugin, collect Redirect/Callback URL and enter it into your Feide application.
• Copy the Client ID and Client Secret and save it under the Client ID and Client Secret in your ASP.NET OAuth Single Sign-On (SSO) plugin.

2. Configure ASP.NET application as service provider

• After configuring your OAuth provider, it will provide you with Client ID, Client Secret, Authorize Endpoint, Access Token Endpoint and Get User Info Endpoint. Configure these values under respective fields.

• Please refer the below table for configuring the scope & endpoints for SwissID in the plugin.

  Client ID :	from the SwissID SSO application configured
  Client Secret :	from the SwissID SSO application configured
  Scope:	openid
  Authorize Endpoint:	https://<your-site-url>/idp/oauth2/authorize
  Access Token Endpoint:	https://<your-site-url>/idp/oauth2/access_token


• Fill all the required details and click on Save Configuration.

3. Testing OAuth SSO

• After saving configuration, click on the Test Configuration to verify if you have configured correctly.
• On successful configuration, you will get Attributes Name and Attribute Values on Test Configuration window. The below screenshot shows a successful result.

4. Attribute Mapping

• Map Attribute Names provided by your OAuth Server with your ASP.NET application Attributes given under Attribute Mapping Section and click on Save Attribute Mapping.

• Note: All the mapped attributes will be stored in the session so that you can access them in your application.

5. Integration Code

• You can find the integration code in Integration Code tab in the connector. Just copy-paste that code snippet wherever you want to access the user attributes.

6. Add following link in your application for Single Sign-On (SSO)

• Use the following URL as a link in your application from where you want to perform SSO:
  http://base-url/?ssoaction=login
• For example you can use it as:
  <a href="http://base-url/?ssoaction=login”>Log in</a>"

You can even configure the DNN SAML Single Sign-On (SSO) module with any identity provider such as ADFS, Azure AD, Bitium, centrify, G Suite, JBoss Keycloak, Okta, OneLogin, Salesforce, AWS Cognito, OpenAM, Oracle, PingFederate, PingOne, RSA SecureID, Shibboleth-2, Shibboleth-3, SimpleSAML, WSO2 or even with your own custom identity provider. To check other identity providers, click here.

Additional Resources

• 2FA for ASP.NET
• DNN OAuth Single Sign-On (SSO)
• 2FA for DNN
• nopCommerce OAuth Single Sign-On (SSO)
• Kentico SAML Single Sign-On (SSO)