.net核心和SAML 2.0 [英] .net core and SAML 2.0

问题描述

我们的大学已使用Shibboleth迁移到基于SAML的身份验证/授权方法.

Our University has migrated to a SAML based authentication/authorization method using Shibboleth.

我已经研究了至少一天的时间，以研究如何将SAML与.net核心Web应用程序一起使用.我不能使用身份服务器4，因为它用于OaTH/Open ID.我在 msdn 上找到了一些文档，这些文档指向商业实施.我在一年前遇到了这个 SO 答复，说Kentor将来可能会支持它，但在该目录上找不到任何内容.有关支持.net core或.net core示例Web应用程序的github页面.截至1月，它仍在计划中，但没有日期.

I have been researching for at least a day on how to use SAML with .net core web applications. I can't use Identity server 4 because it is for OaTH/Open ID. I found some documentation on msdn which points to a commercial implementation. I came across this SO answer from a year ago saying Kentor may support it in the future but couldn't find anything on the github page about support for .net core or a .net core sample web app. As of January it was still planned but no date.

大学正在运行身份提供者.我不明白的是以下内容:

The University has the identity provider running. What I don't understand is the following:

1. 如何设置我的Web应用程序以使用该身份提供者?
2. 如何检查该身份提供者是否已经通过其他应用程序的身份验证，因此可以使用SSO?

此外，任何不使用商业插件而使用SAML的示例应用程序都将不胜感激.

Also, any sample applications that use SAML without commercial plugins would be greatly appreciated.

推荐答案

ITfoxtec具有ASP.NET MVC Core 1.0 SAML2插件，但是它需要.NET Full Framework，并且不能在linux上运行.现在有一些缺少的API阻止了对SAML2的全面.NET Core支持(围绕Crypto XML名称空间). https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2

ITfoxtec has a ASP.NET MVC Core 1.0 SAML2 plugin, but it requires the .NET Full Framework, and won't run on linux. There's some missing APIs that are preventing full .NET Core support right now for SAML2 (around Crypto XML namespace). https://github.com/ITfoxtec/ITfoxtec.Identity.Saml2

我不完全知道您要寻找的内容，但这是一个临时解决方案，直到.NET Standard 2.0为止，这可能会将缺少的API引入.NET Core.

Not exactly what you're looking for I know, but it's an interim solution until probably .NET Standard 2.0, which will probably bring the missing API's to .NET Core.

这篇关于.net核心和SAML 2.0的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！