ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity...
Transcript of ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity...
![Page 1: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/1.jpg)
Copyright © ComponentSpace Pty Ltd 2004-2020. All rights reserved. www.componentspace.com
ComponentSpace
SAML for ASP.NET
Shibboleth
Identity Provider
Integration Guide
![Page 2: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/2.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
i
Contents Introduction ............................................................................................................................................ 1
Configuring the Shibboleth Test Identity Provider ................................................................................. 1
Service Provider Configuration ............................................................................................................... 4
SP-Initiated SSO....................................................................................................................................... 4
IdP-Initiated SSO ..................................................................................................................................... 7
SAML Logout ......................................................................................................................................... 10
Troubleshooting Shibboleth SSO .......................................................................................................... 11
![Page 3: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/3.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
1
Introduction This document describes integration with Shibboleth as the identity provider.
For information on configuring Shibboleth for SAML SSO, refer to the following articles.
https://www.shibboleth.net/
https://wiki.shibboleth.net/confluence
Configuring the Shibboleth Test Identity Provider The Shibboleth test identity provider is available at:
https://samltest.id/
Click the Upload Metadata button and upload the example service provider’s metadata.
The included SAML metadata for the ExampleServiceProvider is used.
![Page 4: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/4.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
2
The uploaded metadata is displayed for confirmation.
![Page 5: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/5.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
3
Click the Download Metadata button and download the Shibboleth metadata.
Alternatively, download from:
https://samltest.id/saml/idp
This is used to configure the service provider.
![Page 6: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/6.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
4
Service Provider Configuration The following partner identity provider configuration is included in the example service provider’s
SAML configuration.
<PartnerIdentityProvider Name="https://samltest.id/saml/idp" Description="Shibboleth" SignLogoutRequest="true" SignLogoutResponse="true" SingleSignOnServiceUrl="https://samltest.id/idp/profile/SAML2/Redirect/SSO" SingleLogoutServiceUrl="https://samltest.id/idp/profile/SAML2/Redirect/SLO" PartnerCertificateFile="Certificates\shibboleth1.cer" SecondaryPartnerCertificateFile="Certificates\shibboleth2.cer"/>
Ensure the PartnerName specifies the correct partner identity provider.
<add key="PartnerName" value="https://samltest.id/saml/idp"/>
SP-Initiated SSO Browse to the example service provider and click the button to SSO to the identity provider.
![Page 7: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/7.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
5
Log into Shibboleth.
![Page 8: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/8.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
6
The user is automatically logged in at the service provider.
![Page 9: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/9.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
7
IdP-Initiated SSO Click the Test Your SP button.
Specify the SP name as its entityID. The RelayState is optional.
![Page 10: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/10.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
8
Log into Shibboleth.
![Page 11: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/11.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
9
The user is automatically logged in at the service provider.
![Page 12: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/12.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
10
SAML Logout The test Shibboleth identity provider supports SP-initiated and IdP-initiated SAML logout.
Control remains at the IdP.
![Page 13: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/13.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
11
Troubleshooting Shibboleth SSO Click the Test Your SP button to review the IdP log.
![Page 14: ComponentSpace SAML for ASP.NET Shibboleth …...ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide 4 Service Provider Configuration The following partner](https://reader030.fdocuments.us/reader030/viewer/2022040606/5eaecbb1bd085e45805c6d8b/html5/thumbnails/14.jpg)
ComponentSpace SAML for ASP.NET Shibboleth Identity Provider Integration Guide
12
Alternatively, review the log at https://samltest.id/logs/idp.log.