Endpoint type HTTP Handler class Sign on dk.nita.saml20.protocol.Saml20SignonHandler Logout dk.nita.saml20.protocol.Saml20LogoutHandler Metadata dk.nita.saml20.protocol.Saml20MetadataHandler A service provider installation must have all 3 handlers installed. The metadata endpoint can be removed once the service provider’s configuration is finalized and its metadata file has been downloaded. Furthermore are two extra endpoints, of which at least one is necessary to install if common domain cookie reading is enabled (more details about this in chapter 11): Endpoint type HTTP Handler class Local cookie reading dk.nita.saml20.protocol.Saml20CDCReader IdP cookie writer return dk.nita.saml20.protocol.SAML20CDCIdPReturnPoint point ASP.NET provides (at two ways to add HTTP handlers to a web application Web.config HTTP handlers can be added to a web application by adding them in the section of <httpHandlers> Consult the MSDN documentation for a reference on the element. The web.config. <httpHandlers> attribute must be set to for the handlers. verb “*” Website files A handler can be added to a website as an file. .ashx Example of how to add sign on handler in a file called signon.ashx: <%@ WebHandler %> More examples of files can be found in the website demo in the distribution. .ashx Attribute queries 10.3 An attribute query enables a service provider to request more attributes on an authenticated subject from the federation partner that authenticated him. More information on attribute queries can be found in section 3.3.2.3 of [SAML]. The queries are executed with the currently authenticated user as a subject. Returned attributes are available through the class after the query finishes. Saml20Identity
Endpoint type HTTP Handler class Sign on dk.nita.saml20.protocol.Saml20SignonHandler Logout dk.nita.saml20.protocol.Saml20LogoutHandler Metadata dk.nita.saml20.protocol.Saml20MetadataHandler A service provider installation must have all 3 handlers installed. The metadata endpoint can be removed once the service provider’s configuration is finalized and its metadata file has been downloaded. Furthermore are two extra endpoints, of which at least one is necessary to install if common domain cookie reading is enabled (more details about this in chapter 11): Endpoint type HTTP Handler class Local cookie reading dk.nita.saml20.protocol.Saml20CDCReader IdP cookie writer return point dk.nita.saml20.protocol.SAML20CDCIdPReturnPoint ASP.NET provides (at two ways to add HTTP handlers to a web application Web.config HTTP handlers can be added to a web application by adding them in the <httpHandlers> section of web.config. Consult the MSDN documentation for a reference on the <httpHandlers> element. The verb attribute must be set to “*” for the handlers. Website files A handler can be added to a website as an .ashx file. Example of how to add sign on handler in a file called signon.ashx: <%@ WebHandler %> More examples of .ashx files can be found in the website demo in the distribution. 10.3 Attribute queries An attribute query enables a service provider to request more attributes on an authenticated subject from the federation partner that authenticated him. More information on attribute queries can be found in section 3.3.2.3 of [SAML]. The queries are executed with the currently authenticated user as a subject. Returned attributes are available through the Saml20Identity class after the query finishes.
Net%20SAML2%20Service%20Provider%20Framework.docx