Greens
Greens

Reputation: 3057

Thinktecture IdentityServer v3 and SAML

Does Thinktecture IdentityServer V3 has support for SAML or does it only support OAuth?

Upvotes: 12

Views: 9780

Answers (4)

Emil Lerch
Emil Lerch

Reputation: 4466

There is Owin middleware to support the SAML protocol you can use with IdentityServer v3. It does not yet support all flows but it is being used in a couple implementations. Full disclosure - I am the author of this code which was forked from a previous SAML2 library on CodePlex.

Upvotes: 2

DavidEdwards
DavidEdwards

Reputation: 593

Nope! No SAML.

leastPrivilege.com

In the article Dominick says... "Having spent a considerable amount of time in the WS*/SAML world, it became more and more apparent that these technologies are not a good match for the modern types of applications that we (and our customers) like to build."

They focused on OpenID Connect and OAuth2.

Upvotes: 1

rbrayb
rbrayb

Reputation: 46720

OpenID Connect, OAuth2, WS-Fed.

@DavidEdwards - no - IdentityServer2 has no SAML support OOTB.

I normally get around this by:

IdentityServer --> WS-Fed --> ADFS --> SAML --> IDP

Upvotes: 1

Anders Abel
Anders Abel

Reputation: 69260

IdentityServer v3 supports any Katana-compatible Owin middleware for authentication. With a compatible middleware for SAML2 such as Kentor.AuthServices IdentityServer 3 can authenticate against external SAML2 Identity Providers with Idsrv acting as a SAML2 Service Provider. I wrote a blog post on how to do it.

There's also a plugin interface which would allow IdentityServer v3 to act as a SAML2 Identity Provider but as far as I know there's no implementation available.

Upvotes: 12

Related Questions