Active Directory SSO In Windows Azure Using SAML 2.0

Sankara Krishnan Venugopal

7y49.2k13100Article

AzureActive Directory SSOSAML 2.0

13 Comments

Join the conversation! Your thoughts help the community grow.

Fernando Moya4y ago
Should parameters be configured in web.config or startup?
shashibhushan kumbhkar5y ago
Can you please write code to test saml login using asp.net c#
Joem Orcullo5y ago
Hi Sankara, I tried the above steps but I'm not getting "SAMLResponse" from the Request.Params.Keys. Can you help me on it? Thanks.
kundan patil5y ago
Can you please provide code for it
Naveen Kumar Obulasetti5y ago
Please provide the sample code i am new on this concept. where i can put this code.
bhaskar6y ago
Hi how to configure the configured to use your Azure Active Directory as a SAML identity provider in asp.net framework 4.7
lawrance rozario6y ago
Hi, Please let me know, how to get Login UserName, FirstName, LastName from the SAMLResponse or Azure?
RUPh1570Ph3L356y ago
Can you share the solution project?
darpesh rupareliya6y ago
HI Sankara, I am trying to implement Azure AD with SAML 2.0. I have done configuration in Azure but I am not sure on code and Web. config on Dot Net End. I have my application in Dot Net Framework 3.5. May you help with it
- Sankara Krishnan Venugopal6y ago
  Please try it in framework version 4.5
José de Jesús Gastélum Peña6y ago
Very Good , i need buy P2 of Azure AD
Ramesh S6y ago
Can we configure it with Owin based ASP application?
- Sankara Krishnan Venugopal6y ago
  Yes Ramesh, you can do that.

Overview

You should have an Azure account to log in. Please create a new account using the link here.

This is the sample architectural diagram for Azure SSO in On-Premises.

Active Directory SSO In Windows Azure Using SAML 2.0

Step 1

The dashboard page will be displayed when we log in the Azure account. Type “Enterprise applications” in the search box and select it.

The selection will be redirected to the “New Application” page.

Step 2

The “New Application” button is selected to create a new enterprise application.

The table contains exiting applications that are created by internal & cloud users. Click on “New Application”.

Step 3

You can see three options on this window.

Click on “Non-gallery application” to integrate your applications.

Step 4

Give any name for the application and click on Add. In the bottom of the text box, a Support link will be displayed. The Support indicates that you are creating an SAML based single sign-on.

Step 5

Once you create a new application, it will come under the Overview page. Here, you can check the following.

User and Groups
Single Sign-on
Owner
Permissions and etc.

Step 6

Select “Users and Groups” and add any member from the list. The main purpose of this is to add login credentials through SSO.

Step 7

I have included one member for testing. The count will display on the Overview page.

Step 8

Click on to Single Sign-on on the left side of the panel and click on SAML method.

Step 9

The new SAML method has been created.

Step 10

You should have SAML supported application in your technology. I am using the .NET framework.

Set your destination on it. Here, www.test.com is my replying party.

Step 11

The below notification will display when you have done your configurations and click on Save.

Step 12

This is an auto-generated key from SAML Signing Certificate.

Step 13

Click on “Test this application” to check your SSO login process.

Step 14

Click on Single Sign-On as Current User to check the application.

Step 15

You can see the redirection through microsoftonline.com.

Step 16

The SSO authentication will reach your given relaying party URL.

.NET Code

This is SAML supported code to get SAML response from Windows Azure method. Use the following code on your .Net application and check it.

string strVarCallResult = string.Empty;
string ClaimUserID = string.Empty;
string ClaimEmployeeID = string.Empty;
try
{
foreach (string s in Request.Params.Keys)
{
if (s.ToString() == "SAMLResponse")
{
rawSamlData = Request.Params[s];
break;
}
}
byte[] samlData = Convert.FromBase64String(rawSamlData);
// read back into a UTF string
string samlAssertion = Encoding.UTF8.GetString(samlData);
XmlDocument doc = new XmlDocument();
XmlNamespaceManager xMan = new XmlNamespaceManager(doc.NameTable);
xMan.AddNamespace("saml2p", "urn:oasis:names:tc:SAML:2.0:protocol");
xMan.AddNamespace("saml2", "urn:oasis:names:tc:SAML:2.0:assertion");
xMan.AddNamespace("ds", "http://www.w3.org/2000/09/xmldsig#");
doc.LoadXml(Encoding.UTF8.GetString(samlData));
//Response.Write(doc.LastChild.ChildNodes[3].ChildNodes[2].ChildNodes[0].InnerXml);
XmlNode xNode = doc.SelectSingleNode("/saml2p:Response/saml2:Assertion/saml2:Subject/saml2:NameID", xMan);
if (xNode != null)
{
UserId = xNode.InnerText;
ClaimUserID = xNode.InnerText;
}
}
catch (Exception ex)
{
}

Please let me know if you have any queries on this.