How to create a custom SSO Member Login in Umbraco v8 (ADFS - No Azure) using "itfoxtec-identity-saml2" Project? - single-sign-on

I'm new with sso login (ADSF - SAML2) with Umbraco v8 and I need some help to know if this is the right package for me.
I'm working on a website using Umbraco CMS v8 and I need to create a custom members login (frontend) using the sso authentication of my company (ADFS - no Azure AD) and my custom login form (C# and .Net Framework 4.7.2+).
I found on NuGet the "itfoxtec-identity-saml2" package that can be used to do it and I saw that there are two packages that could help me: "ITfoxtec.Identity.Saml2" and "ITfoxtec.Identity.Saml2.Mvc"
What are the difference and what reccomand to use?
Any other suggestions to create an SSO Members Login in Umbraco v8, is welcome.
Thank you and I look forward to your reply
Adriano

The ITfoxtec.Identity.Saml2 is the base component implementing the actually SAML 2.0 standard.
The ITfoxtec.Identity.Saml2.Mvc and ITfoxtec.Identity.Saml2.MvcCore implements the elements needed to integration with ASP.NET MVC. The ITfoxtec.Identity.Saml2.Mvc component is for .NET Framework and the ITfoxtec.Identity.Saml2.MvcCore component is for .NET Core and .NET 5.0.
I'm afraid that i do not know anything about Umbraco, sorry I cannot help you there.

Related

wso2is 5.4.1 + liferay 6.2ga6

I followed official documentation from : https://docs.wso2.com/display/IS541/Integrating+WSO2+Identity+Server+with+Liferay to Login in my Liferay Portal with wso2is user, but it not work for me in wso2is-5.4.1 and liferay6.2ga6. When I try login, liferay's log print "Primary URL :https://wso2is.local:9443/services/Secondary URL :null" but no call to wso2is server is done.
I added this lines into my portal-ext.properties :
auth.pipeline.pre=org.wso2.liferay.is.authenticator.WSO2ISAuthenticator auth.pipeline.enable.liferay.check=false wso2is.auth.service.endpoint.primary=https://wso2is.local:9443/services/ wso2is.auth.thrift.endpoint=localhost wso2is.auth.thrift.port=10500 wso2is.auth.thrift.connection.timeout=10000 wso2is.auth.thrift.admin.user=admin wso2is.auth.thrift.admin.user.password=admin wso2is.auth.thrift.endpoint.login=https://wso2is.local:9443/ wso2is.auth.thrift.system.trusstore=/wso2is-5.4.1/repository/resources/security/wso2carbon.jks wso2is.auth.thrift.system.trusstore.password=wso2carbon
Is there something wrong?
Unfortunately, a lot of the WSO2 documentation is very crufty, containing articles that have been pulled forward from previous versions of the documentation without regression testing on the use cases they present. In short, there's stuff in the documentation that plain doesn't work. If you look at the bottom of the article you'll see the following:
Please note that the above configuration is tested with Liferay 6.1.1
and WSO2 Identity 3.2.3/4.0.0.
I recall I tested this a long time ago, and determined that it wouldn't work with the current version, but that was so long ago that I can't remember why. In any case, the approach presented for integrating Liferay was offered at a time where Liferay didn't have the ability to use standardized authentication protocols like SAML. Now that it does, you probably want to do it in a standards compliant manner instead of using an authentication interface Liferay only promotes using for proprietary authentication systems.
My suggestion is that if you are using Liferay portal enterprise with LDAP that you use the built-in SAML connector. If you aren't using Enterprise, there are some compatible authenticator extensions in the extensions store that will also integrate with Liferay. If you configure Liferay to be a client against WSO2 and then integrate Liferay to LDAP on the backend, it also allows Liferay to be used as a user dashboard instead of the jaggery based one that comes in the product.

IdentityServer and windows authentication through wsfederation

this is newbie question about identityServer and windows authentication. The samples provided with IdentityServer3 with windows authentication seem to implement it using WSFederation, like the one provided in this link https://github.com/IdentityServer/IdentityServer3.Samples/tree/master/source/WebHost%20(Windows%20Auth%20All-in-One).
The newest samples with identityserver4 are using a different approach without Federation. Are these approaches equivalent? Are there benefits in one approach over the other.I can understand using Federation for ADFS, but not for Windows authentication with AD. I know I am missing something can't figure it out. What is it? Thanks.
Identity Server 4 is based on .NET Core which currently does not support WS-Federation so if that is a requirement you should stick to Identity Server 3 on the "standard" framework.
According to the devs there's a "test" version out for WS-Fed but if it will be included in the final release of .NET Core 2.0 is still uncertain.
See https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/issues/500

JOSSO - What is the basic setup step

I'm on a task that implement SSO using josso, but i am very new to this aspect. I have an website on asp.net MVC4 using IIS. I have tried to install JOSSO 2.0 on my machine but i do not know where to start. Can you give me details of it
Thank you very much

Where can one download Microsoft jQuery Unobtrusive Validation without using NuGet

I'd like to download the latest version of Microsoft jQuery Unobtrusive Validation, however I don't like using NuGet since it is not possible for me to tell it where to install the packages within my project structure.
Does Microsoft host these files somewhere that I can access them directly?
The files for ASP.NET MVC 5.2 aren't (yet?) on the page I mention below, but the links are valid:
http://ajax.aspnetcdn.com/ajax/mvc/5.2/jquery.validate.unobtrusive.js
http://ajax.aspnetcdn.com/ajax/mvc/5.2/jquery.validate.unobtrusive.min.js
[Copied from Maxime's answer to this question.]
I found a page – Microsoft Ajax Content Delivery Network - ASP.NET Ajax Library – that lists several versions of the files for this that you can download.
Here are the ones I found via searching that page for "unobtrusive":
ASP.NET MVC 5.1
http://ajax.aspnetcdn.com/ajax/mvc/5.1/jquery.validate.unobtrusive.js
http://ajax.aspnetcdn.com/ajax/mvc/5.1/jquery.validate.unobtrusive.min.js
ASP.NET MVC 5.0
http://ajax.aspnetcdn.com/ajax/mvc/5.0/jquery.validate.unobtrusive.js
http://ajax.aspnetcdn.com/ajax/mvc/5.0/jquery.validate.unobtrusive.min.js
ASP.NET MVC 4.0
http://ajax.aspnetcdn.com/ajax/mvc/4.0/jquery.validate.unobtrusive.js
http://ajax.aspnetcdn.com/ajax/mvc/4.0/jquery.validate.unobtrusive.min.js
ASP.NET MVC 3.0
http://ajax.aspnetcdn.com/ajax/mvc/3.0/jquery.unobtrusive-ajax.js
http://ajax.aspnetcdn.com/ajax/mvc/3.0/jquery.unobtrusive-ajax.min.js
http://ajax.aspnetcdn.com/ajax/mvc/3.0/jquery.validate.unobtrusive.js
http://ajax.aspnetcdn.com/ajax/mvc/3.0/jquery.validate.unobtrusive.min.js
...
Here are the links :
jQuery Unobtrusive for ASP.NET MVC 5.2.3
http://ajax.aspnetcdn.com/ajax/mvc/5.2.3/jquery.validate.unobtrusive.js
http://ajax.aspnetcdn.com/ajax/mvc/5.2.3/jquery.validate.unobtrusive.min.js
jQuery Unobtrusive for ASP.NET MVC 5.2.2
http://ajax.aspnetcdn.com/ajax/mvc/5.2.2/jquery.validate.unobtrusive.js
http://ajax.aspnetcdn.com/ajax/mvc/5.2.2/jquery.validate.unobtrusive.min.js
jQuery Unobtrusive for ASP.NET MVC 5.2
http://ajax.aspnetcdn.com/ajax/mvc/5.2/jquery.validate.unobtrusive.js
http://ajax.aspnetcdn.com/ajax/mvc/5.2/jquery.validate.unobtrusive.min.js
And by using these files, you will also need to include jquery.validate(.min).js. The latest files can be found :
jQuery Validate
http://www.asp.net/ajax/cdn#jQuery_Validation_Releases_on_the_CDN_3
or
http://jqueryvalidation.org/
You can browse the Microsoft Ajax CDN for all needed librairies: http://www.asp.net/ajax/cdn
It's available/hosted by google here code.google.com

installing and using doctrine with zend framework

I have been using zend framework quite a long. Now I want to integrate doctrine orm framwork with zend. I don't know how to do that. Is there any setup guide with some basic examples? and How can I put it on shared host where i don't have console access?
thanks in advance
There's various resources around.
Benjamin Eberlei's zf-doctrine (Zend 1 / Doctrine 1) Integration suite - https://github.com/beberlei/zf-doctrine
I also just got this webinar announcement in the Zend newsletter (requires a free Zend account to view) - http://www.zend.com/webinar/Framework/70170000000bSrG-webinar-zf-v-1-doctrine-v-2-20101214.flv
Regarding deployment, you just build your project locally then upload the complete application to your host. Both Zend Framework and Doctrine are just libraries of PHP files.