Secure Your ASP.NET Web Forms Application with OpenID Connect and Okta

Developer Blog Comments
41

Richard Corkery

@disqus_aU18uBDbDw Were you able to get the logout to work?

42

Richard Corkery

I, and a few others, had an issue with the logout process. I was able to get this resolved by adding the code shown below in Startup.cs. The new code is placed under the n.AuthenticationTicket.Identity.AddClaims(claims); line shown above in the original post. I include that line to identify where the new code should be placed. The new code starts with: RedirectToIdentityProvider.

I hope this helps someone else since I spent hours trying to figure it out.

n.AuthenticationTicket.Identity.AddClaims(claims);
},
RedirectToIdentityProvider = n =>
{
// If signing out, add the id_token_hint
if (n.ProtocolMessage.RequestType == OpenIdConnectRequestType.Logout)
{
var idTokenClaim = n.OwinContext.Authentication.User.FindFirst(“id_token”);

if (idTokenClaim != null)
{
n.ProtocolMessage.IdTokenHint = idTokenClaim.Value;
}

}

return Task.CompletedTask;
}

43

Richard Corkery

I was able to get this resolved. See my post on 3/31/21 above.

44

Richard Corkery

I was able to get this resolved. See my post on above made on 3/31/21.

45

Stan

Thank you for sharing this, this resolved the errors I was getting

46

Stan

I was getting this same error, however Dave Ayiku’s suggestion helped solve the problem for me. Try uninstalling the NuGet package for the IdentityModel package and then re-installing it as version 3.8.0. That seemed to resolve the error

47

Mark Hatoum

Is there some documentation on Web Forms using OWIN with ResponseType = OpenIdConnectResponseType.Code?

We are restricted from using the Implicit (Hybrid) / ID Token option on our instance of OKTA.

48

Joseph Jones

Hi
I have converted the above c# code to VB and I get the following error:
UserInfoClient’ is not defined.
Overload resolution failed because no accessible ‘New’ accepts this number of arguments
RequestAuthorizationCodeAsync’ is not a member of 'TokenClient’
Can anyone, please help me on this, thanks

49

Joseph Jones

Hi,
I am trying OKTA OpenID Connect in ASP.NET in Visual basic. I got the following error message:
IDX20108: The address specified ‘[PII is hidden]’ is not valid as per HTTPS scheme. Please specify an https address for security reasons. If you want to test with http address, set the RequireHttps property on IDocumentRetriever to false.
Parameter name: address

Can anyone please help me to resolve this error?
Thanks
Joseph

50

Richard Corkery

I could be wrong. But did you assign the user (yourself) to the okta application?

51

Developer

How to read the settings from Database instead of getting it from Web.Config

54

I am having trouble incorporating this into an existing asp.net application when I update to NewtonSoft.json version 13.03 the Okta Login code fails.

55

I am doing testing with this example, but get this error when I attempt to login:

IDX20807: Unable to retrieve document from: ‘https://myOktadomain.us.auth0.com/oauth2/default/.well-known/openid-configuration’. HttpResponseMessage: 'StatusCode: 404, ReasonPhrase: ‘Not Found’, Version: 1.1, Content:

Any thoughts?

56

@ Satish Neelakantam I have similar application which uses the AD authentication and I have the same issue you had… Did your issue got resolved?

57

@Mark Hatoum Are you able to find any documentation without using Implict(Hybrid)?