MetadataExporter and SingleLogoutService

SAML for ASP.NET
1

Hello.

I am using database stored configuration and MetadataExporter.Export(samlConfig, x509Certificate, sPartnerIdPName) to generate the metadata. The following lines return TODO:… for SingleLogoutService and AssertionConsumerService:

<md:SingleLogoutService Binding=“urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect” Location=“TODO: URL of SLO service endpoint” />
<md:SingleLogoutService Binding=“urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST” Location=“TODO: URL of SLO service endpoint” />
md:NameIDFormaturn:oasis:names:tc:SAML:1.1:nameid-format:unspecified</md:NameIDFormat>
<md:AssertionConsumerService Binding=“urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST” Location=“TODO: URL of assertion consumer service endpoint” index=“0” isDefault=“true” />

How can I configure these values in code so this is correctly exported?

2

The SingleLogoutService and AssertionConsumerService URLs are not part of the SAML configuration. Therefore the MetadataExporter.Export method includes place holders. You can update the EntityDescriptor returned by MetadataExporter.Export to specify the actual URLs.


// Specify the assertion consumer service URL.
entityDescriptor.SPSSODescriptors[0].AssertionConsumerServices.Clear();
entityDescriptor.SPSSODescriptors[0].AssertionConsumerServices.Add(new IndexedEndpointType(SAMLIdentifiers.BindingURIs.HTTPPost, assertionConsumerServiceUrl, null, 0, true));

// Specify the single logout service URL.
entityDescriptor.SPSSODescriptors[0].SingleLogoutServices.Clear();
entityDescriptor.SPSSODescriptors[0].SingleLogoutServices.Add(new EndpointType(SAMLIdentifiers.BindingURIs.HTTPRedirect, singleLogoutServiceUrl, null));
entityDescriptor.SPSSODescriptors[0].SingleLogoutServices.Add(new EndpointType(SAMLIdentifiers.BindingURIs.HTTPPost, singleLogoutServiceUrl, null));