我必须在旧的WebForms项目上使用Kentor进行SAML身份验证。到目前为止,我已经添加了Kentor.AuthServices
和Kentor.AuthServices.HttpModule
。我需要使用OKTA进行此操作。因此,我被重定向到OKTA登录,我在那里登录,然后下载AuthServices作为响应,然后一切都停止了。不幸的是,我也不例外。我试图在SPOptions上应用记录器,但没有成功。
<configSections>
<section name="system.identityModel" type="System.IdentityModel.Configuration.SystemIdentityModelSection, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
<section name="system.identityModel.services" type="System.IdentityModel.Services.Configuration.SystemIdentityModelServicesSection, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
<section name="kentor.authServices" type="Kentor.AuthServices.Configuration.KentorAuthServicesSection, Kentor.AuthServices" />
</configSections>
<system.web>
<httpRuntime targetFramework="4.6.2" />
<authentication mode="Forms">
<forms defaultUrl="~/AuthServices" loginUrl="~/AuthServices/SignIn?" />
</authentication>
<authorization>
<deny users="?" />
<allow users="*" />
</authorization>
<identity impersonate="false"/>
<pages controlRenderingCompatibilityVersion="3.5" clientIDMode="AutoID"/>
</system.web>
<system.webServer>
<modules>
<add name="SessionAuthenticationModule" type="System.IdentityModel.Services.SessionAuthenticationModule, System.IdentityModel.Services, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
<add name="Saml2AuthenticationModule" type="Kentor.AuthServices.HttpModule.Saml2AuthenticationModule, Kentor.AuthServices.HttpModule" />
</modules>
<handlers>
<add verb="*" path="*.sso" name="SSOHandler" type="Kentor.AuthServices.HttpModule.SAML2SecurityHandler" />
</handlers>
<defaultDocument>
<files>
<add value="default.aspx"/>
</files>
</defaultDocument>
<directoryBrowse enabled="true"/>
</system.webServer>
<kentor.authServices entityId="http://localhost:26700/" returnUrl="http://localhost:26700/default.aspx">
<identityProviders>
<add entityId="http://www.okta.com/klnzzntoahdIrOUlP055"
signOnUrl="https://dev-652879.oktapreview.com/app/nadev652879_product_1/klnzzntoahdIrOUlP055/sso/saml"
allowUnsolicitedAuthnResponse="true"
binding="HttpRedirect">
<signingCertificate fileName="~/App_Data/okta.cert" />
</add>
</identityProviders>
</kentor.authServices>
<system.identityModel.services>
<federationConfiguration>
<cookieHandler requireSsl="false" hideFromScript="true" name="SSO" />
</federationConfiguration>
</system.identityModel.services>
有人可以给我提供Kentor + WebForms的工作示例,还是至少可以指出我的方法中可能存在的问题?