Can we have a relative SAML AssertionConsumerService URL ?

SAML for ASP.NET Core
1

Hi Team,

We had recently purchased the ComponentSpace SAML for ASP.Net Core and configured the SSO for two identity providers (Okta and ADFS).

The following is my Local Service Provider configuration:

“LocalServiceProviderConfiguration”: {
“Name”: “ComponentSpace”,
“Description”: “”,
“AssertionConsumerServiceUrl”: "<a href=“https://192.168.10.20:44394/Saml/AssertionConsumerService",">https://192.168.10.20:44394/Saml/AssertionConsumerService”,
“SingleLogoutServiceUrl”: "<a href=“https://192.168.10.20:44394/Saml/SingleLogoutService",">https://192.168.10.20:44394/Saml/SingleLogoutService”,
“LocalCertificates”: [
{
“FileName”: “Certificates\sp.pfx”,
“Password”: “password”
}
]
}

While configuring the Identity Provider, I had to use the same “AssertionConsumerServiceUrl” value in the Okta and ADFS to establish the trust relationship.

Is it possible to have a relative URL for the AssertionConsumerServiceUrl instead of the full absolute URL ? For ex: ~/Saml/AssertionConsumerService

Thanks,
Bhargav

2

Hi Bhargav
Yes, this is supported but not with the tilde character.
You can specify “/Saml/AssertionConsumerService” and we will convert this into an absolute URL.