0

I have a requirement to implement single sign-on from our old application to new application. The flow exists as follows:

1) User logs into their old application portal with his credentials. This old application is currently acting as IDP as it stores the credentials(userid/password) of all the existing users.

2) Now the user clicks on a link from old application which will redirect him to the new application. Please note that the new application is developed by us which acts as a Service provider. The new application doesnt have any information about the user and his credentials. I need to implement SSO here so that when the user clicks on the new application link from old application he will be just redirected to the new application. Our old application which is acting as IDP is generating the SAML assertion and are providing to us.

I need help with implementing the Service provider to receive the SAML assertion. Please see below where I need help

3) Currently, As we are receiving the SAML assertion from the old application. My team lead has suggested me to expose a service end point(WCF service or .net web service) to receive a http post. My understanding is he is asking me to write a WCF Restful service using post so that the old application can share the SAML assertion. Is my understanding correct and is this a correct process?

Next he asked me to test the service I write to output the result. How to test the service?

I need help to how to write the service to receive SAML response at Service Provider end. Is SAML response a file that we receive?

rithwik rithwik
  • 1
  • 1
  • Hi and welcome to StackOverflow. The question you have posted does not fall in the scope of questions discussed here. Please refer to the [FAQ](http://stackoverflow.com/faq) to see what kind of questions you can ask here. You have to provide something you've tried and errors or the unexpected you're getting. Regards. – Brandon Zamudio May 10 '17 at 20:58
  • Hi Brando, Thanks for your response. I am trying to implement SSO using SAML as mentioned in the question. I implemented WCF restful service with Post to expose the end point to receive the SAML response from IDP. My question here is how to read the SAML response now and is this correct way to do it? – rithwik rithwik May 11 '17 at 02:05
  • @rithwikrithwik I think this will answer lot of your questions and will be helpful in understanding SAML service provider workflow. http://stackoverflow.com/questions/5502231/how-to-become-a-saml-service-provider You can also look into ComponentSpace SAML 2.0 library for easily validating and parsing the assertion. Its not an open source library just FYI. http://www.componentspace.com/SAMLv20.aspx – Vbp May 12 '17 at 19:54

0 Answers0