I see examples of NuGet package and example asp.net core SAML authentication to OKTA.
For webforms or asp.net framework, I see examples for OAuth authentication. Does OKTA support SAML authentication for asp.net framework. If so, can you please provide an link.
Okta supports the SAML protocol itself (and you’ll see that a lot of application in our Okta Integration Network use SAML for SSO), we just don’t have our own purpose-built SDKs for SAML like we do for OIDC. Accordingly, our documentation lists some available open source toolkits that you can use to build your own custom SAML integration here.
For .NET, these are the ones we list:
- .NET Framework 4.5 or later: Sustainsys.Saml2 (opens new window)(formerly Kentor Authentication Services)
- .NET Framework 4.0 or earlier: ComponentSpace SAML 2.0 for ASP.NET and ASP.NET Core (opens new window)(paid software)
Adding to the above docs, there is a very good blog on how to integrate dotnet with Okta using SAML.
1 Like
I tried to implement okta saml login.aspx
var samlEndpoint = ConfigurationManager.AppSettings[“Saml2:IdPMetadata”];
var request = new AuthRequest(
ConfigurationManager.AppSettings["Saml2:Issuer"], //TODO: put your app's "entity ID" here
"http://localhost:53914/Auth/Assert.aspx" //TODO: put Assertion Consumer URL (where the provider should redirect users after authenticating)
);
//now send the user to the SAML provider
Response.Redirect(request.GetRedirectUrl(samlEndpoint));
it always redirects me to
<md:EntityDescriptor xmlns:md=“urn:oasis:names:tc:SAML:2.0:metadata” entityID=“http://www.okta.com/exkdvwyhcnSP9KpVN5d7”>
<md:IDPSSODescriptor WantAuthnRequestsSigned=“false” protocolSupportEnumeration=“urn:oasis:names:tc:SAML:2.0:protocol”>
<md:KeyDescriptor use=“signing”>
<ds:KeyInfo xmlns:ds=“XML-Signature Syntax and Processing”>
Hi @nmanipandian , it seems like a configuration issue with the open-source library ITFoxtec or you might be missing any additional packages that are required for .NET Framework.
ITFoxtec now less focuses on .NET Framework as it is quite legacy stuff.
You can try the following alternatives:
- miniOrange (Commercial): Supports .NET Framework & .NET
- Sustainsys (Opensource): Supports .NET Framework, this is very much extensible but requires complex code
- AspNetSAML (OpenSource): Supports .NET Framework, very simple and easy to user but is not extensible