Configure ASP.NET as SAML Identity Provider Setup Guide

Overview

ASP.NET as SAML identity provider module provides a ready-to-use solution for SAML 2.0 login using ASP.NET credentials. ASP.NET SAML IdP module acts as a SAML 2.0 identity provider which can be configured to establish the trust between the ASP.NET application and various SAML 2.0 supported service providers such as WordPress, Drupal, Moodle and many more to securely authenticate the users using the ASP.NET application credentials.

Pre-requisites : Download And Installation

• To install the miniOrange SAML IDP NuGet package in your .NET application, just install the miniOrange NuGet package on top of your application.

• After Installation, open your browser and browse the module dashboard with the URL below:

• If the registration page or login page pops up, you have successfully added the miniOrange SAML IDP NuGet package to your application.

• Register or log in with your account by clicking the Register button.

• After successful registration, you will receive a trial license key on your registered email address.

• If you have not received the license key to your provided email, use the Click here button in the plugin to download the license file.

• To activate the module, you can either:
• Enter the license key received via email in the provided input field.

OR

• Upload the license file that you downloaded using the link mentioned above.

• Then, check the box "I have read the above conditions and I want to activate the module", and click the Activate License button.

Configure the ASP.NET SAML IDP Plugin

• Open the Service Provider Settings in your ASP.NET application where you can provide these service provider metadata.

• You can fill in the details manually or by using the Upload SP Metadata button. You will be able to upload all the metadata using a Metadata XML file or a Metadata URL.

• Now, go to the Identity Provider Settings tab. Provide the IdP metadata to your Service Provider by either downloading the metadata file or copying the metadata details manually, as per your integration requirements.

Code Integration

To send the details from ASP.NET to your service provider in the form of SAML tokens first, we will be required to set the authenticated user details in session variables.

• If you want to send user details such as the username, you can store this information in a session variable after your authentication mechanism. Refer to the sample code below:

• Map this same session variable in the ASP.NET SAML IdP plugin so that the plugin knows which session value needs to be sent in the SAML token.

• NameID is the default SAML attribute which you can set to the given values.

• Once everything above is completed, you can initiate the SSO from your .NET application using the following link for the authenticated user:

• For example, you can use it as HTML anchor tag or HTML button on your site after a user is authenticated on .NET application.

Related Articles

• ASP.NET SAML SSO
• ASP.NET OAuth SSO
• ASP.NET Core Decoupled Application

Get in Touch

Please reach out to us at aspnetsupport@xecurify.com, and our team will assist you with setting up the ASP.NET Core SAML SSO. Our team will help you to select the best suitable solution/plan as per your requirement.