Table of Contents

Interface ISaml2SsoResponseGenerator

Namespace
Fdyay.IdentityServer.Saml.Idp
Assembly
Fdyay.IdentityServer.Saml.dll

Answers a SAML sign-on: the signed response a service provider is sent. Duende 8.0.1's ISaml2SsoResponseGenerator.

public interface ISaml2SsoResponseGenerator

Remarks

Asked by both sign-on doors — for the assertion once the user is signed in, and for the failure when a passive request finds nobody or the user declines at the login page. Saml2SSoResponseGenerator is the default, open for one step to be overridden; AddSaml registers it unless a host registered its own first.

Methods

CreateErrorResponse(ValidatedAuthnRequest, Saml2InteractionResponse, CancellationToken)

The signed response carrying interactionResponse's status and no assertion, when the error is safe to send to the service provider; otherwise a result naming the error for the error page.

Task<Saml2FrontChannelResult> CreateErrorResponse(ValidatedAuthnRequest validatedAuthnRequest, Saml2InteractionResponse interactionResponse, CancellationToken ct)

Parameters

validatedAuthnRequest ValidatedAuthnRequest
interactionResponse Saml2InteractionResponse
ct CancellationToken

Returns

Task<Saml2FrontChannelResult>

CreateResponse(ValidatedAuthnRequest, CancellationToken)

The signed response carrying an assertion about Subject, or why there is none.

Task<Saml2FrontChannelResult> CreateResponse(ValidatedAuthnRequest validatedAuthnRequest, CancellationToken ct)

Parameters

validatedAuthnRequest ValidatedAuthnRequest
ct CancellationToken

Returns

Task<Saml2FrontChannelResult>