SAML for ASP.NET Core

Fully compliant with the SAML v2.0 specification

Download Free Trial

Purchase

Product Details

The award-winning SAML library for ASP.NET Core allows you to quickly and securely add SAML SSO support to your application.

Successfully tested against ADFS, Microsoft Entra (Azure AD), Okta, Google, Salesforce, IdentityServer, OneLogin, Ping Identity, Shibboleth, Microsoft 365 and many more.

Related Products

We also offer a SAML for ASP.NET library.

Alternatively, you can purchase both our SAML for ASP.NET and SAML for ASP.NET Core libraries together with our cost-effective SAML Suite.

The combination of the OpenID for ASP.NET Core and SAML libraries enables OpenID Connect (OIDC) clients to participate in SSO with SAML identity providers.

SAML for ASP.NET Core

What's included?

SAML C# Example Projects to Help You

SAML ASP.NET Core projects written in C#, with full source code, are included.

The examples demonstrate:

Acting as the SAML service provider (SP)
Acting as the SAML identity provider (IdP)
Service provider initiated SSO
Identity provider initiated SSO

Setting and retrieving SAML attributes
SAML Logout
SAML metadata creation and consumption
ASP.NET Core Identity integration

High Level SAML API

Add SAML SSO functionality to your web application with just a few lines of code.

A high-level, configuration-driven SAML API hides the complexities of SAML SSO, making for a quick and easy implementation.

Configuration changes, including adding support for additional partner providers, can be made with zero code updates.

SAML Middleware

The SAML authentication handler provides SSO support for service provider applications. The SAML middleware provides SSO support for identity provider applications. The middleware approach means even fewer lines of code.

Initiating SSO from the SP

A SAML authn request is created and sent to the IdP.

            
// SP-initiated SSO.
await _samlServiceProvider.InitiateSsoAsync(partnerName, returnUrl);

Initiating SSO from the IdP

A SAML response is created and sent to the IdP.

            
// IdP-initiated SSO.
await _samlIdentityProvider.InitiateSsoAsync(partnerName, userName, attributes, relayState);

Receiving the SAML Response

A SAML response is received from the SP and processed.

            
// SP or IdP-initiated SSO.
var ssoResult = await _samlServiceProvider.ReceiveSsoAsync();

Low Level SAML API

A low-level API provides complete control and flexibility.

The low-level SAML API allows access to the SAML profiles, protocols, bindings, assertions and metadata. For most scenarios, the high-level SAML API provides all the control you need in a simpler interface. For situations where this isn’t enough, the low-level SAML API is available.