Interface ISaml2SsoInteractionResponseGenerator

Namespace

Fdyay.IdentityServer.Saml.Idp

Assembly

Fdyay.IdentityServer.Saml.dll

Decides what a SAML sign-on needs from the user: to sign in, nothing, or an error. Duende 8.0.1's ISaml2SsoInteractionResponseGenerator.

public interface ISaml2SsoInteractionResponseGenerator

Remarks

Asked by the sign-on service for a request that arrives, after it has been validated and its reply address checked, as Duende's SingleSignOnServiceEndpoint asks it; the callback a user returns to from the login page makes its own check, as Duende's does. Saml2SsoInteractionResponseGenerator is the default; AddSaml registers it unless a host registered its own first.

What the answer cannot do is held by the endpoint, which a generator cannot reach: NoInteraction() for nobody signed in, or for a request that says ForceAuthn, and Login() for a request that says IsPassive, are each an InvalidOperationException rather than an answer; an error is answered through CreateErrorResponse(ValidatedAuthnRequest, Saml2InteractionResponse, CancellationToken), which takes only a SAML error status.

Methods

ProcessInteractionAsync(ValidatedAuthnRequest, CancellationToken)

What the sign-on request needs from the user.

Task<Saml2InteractionResponse> ProcessInteractionAsync(ValidatedAuthnRequest request, CancellationToken ct)

Parameters

request ValidatedAuthnRequest

ct CancellationToken

Returns

Task<Saml2InteractionResponse>

Remarks

Subject is the session's user, or an anonymous principal when nobody is signed in.