ASP.NET as SAML Identity Provider Setup Guide

1. Pre-requisites: Download & Installation

• After integration, open your browser and browse the module dashboard with the URL below:
  https://<your-application-base-url>/?ssoaction=config

• Register into the module.

2. Configure the ASP.NET SAML IDP Plugin

• In the Database Connection tab, connect your application database by providing the appropriate information and clicking the Save button.

• Go to the Identity Provider Settings tab and provide the IdP metadata to your service provider by downloading the metadata file or copying it manually.

• You will now be required to provide the service provider metadata to your ASP.NET SAML IdP module.
• Open the Service Provider Settings in your ASP.NET application where you can provide these service provider metadata.

• You can fill in the details manually or by using the Upload SP Metadata button. You will be able to upload all the metadata using a Metadata XML file or a Metadata URL.

3. Code Integration

To send the details from ASP.NET to your service provider in the form of SAML tokens first, we will be required to set the authenticated user details in session variables.

• Suppose, if you want to send user details like email address, username, firstname, etc., you can put those details in session variables after your authentication mechanism. Refer to the sample code below: HttpContext.Session["Username"] = "<Authenticated_User_Username>";
HttpContext.Session["Email"] = "<Authenticated_User_Email>";
HttpContext.Session["Firstname"] = "<Authenticated_User_Firstname>";
HttpContext.Session["Lastname"] = "<Authenticated_User_Lastname>";
• Map these same session variables in the ASP.NET SAML IdP plugin so that the plugin understands which session values needs to be sent actually in the SAML tokens.
• NameID is the default SAML attribute which you can set to the given values.

• Once everything above is completed, you can initiate the SSO from your .NET application using the following link for the authenticated user: https://[Your-Application-Base-URL]/?ssoaction=idpinitiatedsso
• For example, you can use it as HTML anchor tag or HTML button on your site after a user is authenticated on .NET application. <a href=”https://base-url/?ssoaction=idpinitiatedsso”>Login</a>