Use Kentico membership in Web Application project

Chee Wooi Teoh asked on June 30, 2017 04:05

I am developing a Kentico web application project which need to use third party IDP for authentication which using SAML2 SSO. Anyone can share some ideas or solutions?

I have a working version of code for ASP .net web forms but I am having problem to put this code in Kentico.

It is something close to this sample from Kentico.

membership saml2 owin

Recent Answers

Mike Wills answered on June 30, 2017 17:16

Hi Vincent,

I have an external authentication solution working in Kentico. Perhaps, if you can share what problems you are experiencing, I can help.

Mike

0 votesVote for this answer Mark as a Correct answer

Chee Wooi Teoh answered on July 4, 2017 01:30

Hi Mike,

i have tested the external authentication in two scenarios.

1) Override SecurityEvents.AuthenticationRequested.Execute method CustomAuthenticationModule class. Problems: It show me an empty page showing "Object moved to here."

2) Create a webpart to trigger external login. Problems: a) Must login to Kentico if I want to click on the login button b) IDP can't find the page(../AuthServices/Acs) in Kentico after successfully login. (Using Kentor AuthServices)

0 votesVote for this answer Mark as a Correct answer

Mike Wills answered on July 4, 2017 04:25

Hi Vincent,

The AuthenticatedRequested event would be used for you to redirect users to a URL that invokes the authentication process. You could redirect users to a URL specified by Kentor AuthServices to start the login process, in this event.

Regarding using a webpart to trigger external login, the webpart needs to on a page that allows anonymous users.

Regarding the “/AuthServices/Acs” issue, are you using the Kentor AuthServices HTTP Module? If you have Kentor AuthServices working in a standalone ASP.NET Forms application, and configured it the same way in the Kentico application, I suspect that the Kentico HTTP Module is handling the requests before the Kentor module gets a chance to process them. To solve this problem, configure the URLs used by AuthServices to be excluded by Kentico in Settings->URLs and SEO->Excluded URLs.

Mike

0 votesVote for this answer Mark as a Correct answer