Multiple local providers through saml.config file

SAML for ASP.NET Core
1

Hi all,

We have a configuration that looks like the below.

We would like to add another partner idp but with different configuration on the local service provider side. Is this possible through the config file? If so how?


“LocalServiceProviderConfiguration”: {
“Name”: “someid”,
“Description”: “Service1”,
“AssertionConsumerServiceUrl”: “<a href=“https://subdomain.domain.com/login/saml",">https://subdomain.domain.com/login/saml”,
“SingleLogoutServiceUrl”: “<a href=“https://subdomain.domain.com/logout/saml",">https://subdomain.domain.com/logout/saml”,
“LocalCertificates”: [{
“SubjectName”: “*.domain.com”
}]
},
“PartnerIdentityProviderConfigurations”: [{
“Name”: “<a href=“https://external.com/” ,”=”” title=“https://external.com” target=“_blank” style=“text-decoration: underline !important; color: rgb(97, 166, 199); font-family: Courier, "Courier New"; font-size: 13.3333px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: pre; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;”><a href=“https://external.com”,“>https://external.com”,<a href=“https://external.com”,“>https://external.com”,
“Description”: “DESC”,
“SignAuthnRequest”: true,
“SignLogoutRequest”: true,
“SignLogoutResponse”: true,
“DisableInResponseToCheck”: true,
“SingleSignOnServiceUrl”: “<a href=“https://external.com/” ,”=“” title=“https://external.com” target=“_blank” style=“text-decoration: underline !important; color: rgb(97, 166, 199); font-family: Courier, "Courier New"; font-size: 13.3333px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: pre; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;”><a href=“https://external.com”,“>https://external.com”,<a href=“https://external.com”,“>https://external.com”,
“SingleLogoutServiceUrl”: “<a href=“https://external.com/” ,”=“” title=“https://external.com” target=“_blank” style=“text-decoration: underline !important; color: rgb(97, 166, 199); font-family: Courier, "Courier New"; font-size: 13.3333px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: left; text-indent: 0px; text-transform: none; white-space: pre; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;”><a href=“https://external.com”,“>https://external.com”,<a href=“https://external.com”,“>https://external.com”,
“PartnerCertificates”: [{
“FileName”: “bootstrapping/subsystems/saml/certificates/CERT.cer”
}]
}]
}

2

Yes. This is available through our multi-tenancy support. Each tenant has a LocalServiceProviderConfiguration and PartnerIdentityProviderConfigurations.

This can all be included in your appsettings.json etc.

Please refer to the Multi-Tenancy Support section of our Configuration Guide for more information and an example configuration outline.

https://www.componentspace.com/Forums/8234/Configuration-Guide