Table of Contents

Class ValidatedAuthnRequest

Namespace
Fdyay.IdentityServer.Saml.Idp
Assembly
Fdyay.IdentityServer.Saml.dll

A SAML sign-on being answered, as the profile service is shown it. Duende 8.0.1's ValidatedAuthnRequest.

public sealed class ValidatedAuthnRequest : IValidatedRequest
Inheritance
ValidatedAuthnRequest
Implements
Inherited Members

Remarks

ProtocolRequest at SAML sign-on: pattern-match it to this for the service provider, the request it sent, and the claim types its allowed scopes resolved to. Both sign-on doors build one; an IdP-initiated sign-on has no Request.

Properties

AssertionConsumerService

The assertion consumer service the response is delivered to. Duende's.

public IndexedEndpoint? AssertionConsumerService { get; init; }

Property Value

IndexedEndpoint

IsIdpInitiated

Whether this server started the sign-on rather than answering a request.

public bool IsIdpInitiated { get; init; }

Property Value

bool

IssuerName

The entity id the assertion is issued as. Duende's Saml2IdpEntityId.

public required string IssuerName { get; init; }

Property Value

string

NameIdPolicyFormat

The NameID format the request asked for, or null. Duende's.

public string? NameIdPolicyFormat { get; }

Property Value

string

Options

The options the sign-on was served under. Duende's IdentityServerOptions.

public required IdentityServerOptions Options { get; init; }

Property Value

IdentityServerOptions

RelayState

The RelayState the response carries back.

public string? RelayState { get; init; }

Property Value

string

Request

The AuthnRequest being answered; null for an IdP-initiated sign-on, which answers none. Duende's AuthnRequest.

public SamlAuthnRequest? Request { get; init; }

Property Value

SamlAuthnRequest

RequestId

The ID of the request being answered; null for an IdP-initiated sign-on. Duende's.

public string? RequestId { get; }

Property Value

string

RequestedClaimTypes

The claim types the profile service is asked for, from ISamlResourceResolver.

public IReadOnlyList<string> RequestedClaimTypes { get; init; }

Property Value

IReadOnlyList<string>

ServiceProvider

The service provider the assertion is for. Duende's Saml2Sp.

public required SamlServiceProvider ServiceProvider { get; init; }

Property Value

SamlServiceProvider

SessionId

The user's session id, when the session has one.

public string? SessionId { get; init; }

Property Value

string

SessionIndex

The SessionIndex the assertion carries.

public string? SessionIndex { get; init; }

Property Value

string

Subject

The signed-in user.

public required ClaimsPrincipal Subject { get; init; }

Property Value

ClaimsPrincipal

ValidatedResources

The identity resources the provider's allowed scopes named, from ISamlResourceResolver.

public ResourceValidationResult? ValidatedResources { get; init; }

Property Value

ResourceValidationResult