By Frederic - 5/10/2021
I am totally new on SSO and SAML2.0. I don't know more and want to check whether componentspace can meet my requirement or not.
I have a desktop program and this program with Login function which can let user to type User Name and Password.
But our customer thinks this function is not safe. and they said we have to implement SSO function with their SSO Service (Identity Provider).
You must send metadata or the following information to their Side for SSO Implementation.
those metadata including
1- EntityID (Issur Name) : it's website with login and password text box.
2- Public certificate(X509 Certificate Public Key)
3- Assertion Consumer Service URL ( Endpoint URI) (Single Sing On Service URL)
4- Single Logout URL
5- 5- SSO Binding (urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST / urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect)
6-Sign Assertion/Authentication Request == True.
7-SP-Initiated SSO== True.
Do you know where I can find those information? or I can integrate componentspace API into my C# code to finish this requirement.
If I said something wrong or post to wrong website, please let me know.
By ComponentSpace - 5/10/2021
Please note that SAML SSO is a browser based protocol. All messages between the identity provider and service provider sites are sent via the browser. You would need a service provider website and your desktop application would either need an embedded browser control or invoke an instance of the browser to participate in SSO.
For more information on how SAML SSO works, please refer to our SAML Primer.
You can create SAML metadata for your service provider website using our CreateMetadata console app project. This is described in our SAML Metadata Guide.
Before doing this, I suggest taking a look at the ExampleServicerProvider project under the Examples\SSO\WebForms folder. It demonstrates calling our SAML API as well as including a saml.config file. This folder also includes a ExampleServiceProvider-metadata.xml which is the SAML metadata for this website.
The Examples Guide walks you through the ExampleServicerProvider project and other projects.
Of course, you're very welcome to ask questions on the forum or contact us at [email protected].