Table of Contents

Class SamlAuthnRequest

Namespace
Fdyay.IdentityServer.Saml.Messages
Assembly
Fdyay.IdentityServer.Saml.dll

A SAML AuthnRequest issued by an SP.

public sealed class SamlAuthnRequest
Inheritance
SamlAuthnRequest
Inherited Members

Properties

AssertionConsumerServiceIndex

The AssertionConsumerServiceIndex the sender named instead of a URL, or null. Duende's.

public int? AssertionConsumerServiceIndex { get; init; }

Property Value

int?

AssertionConsumerServiceUrl

The AssertionConsumerServiceURL the response is to be delivered to; empty when the request names none (SAML 2.0 core §3.4.1).

public required string AssertionConsumerServiceUrl { get; init; }

Property Value

string

Destination

The URL the request was sent to; empty when it names none.

public required string Destination { get; init; }

Property Value

string

ForceAuthn

Whether the sender requires the user to authenticate afresh rather than ride an existing session (SAML 2.0 core §3.4.1). Read as true only for the literal true, ignoring case.

public bool ForceAuthn { get; init; }

Property Value

bool

Id

The request's ID, which the response quotes back as InResponseTo (SAML 2.0 core §3.2.1).

public required string Id { get; init; }

Property Value

string

IdpList

The ProviderID of each IDPEntry in the request's Scoping/IDPList (SAML 2.0 core §3.4.1.2-3), in order; empty when it sent none.

public IReadOnlyList<string> IdpList { get; init; }

Property Value

IReadOnlyList<string>

Remarks

The identity providers the sender would accept. One alone is handed to the login page as its IdP hint, as Duende hands it. Read since 0.145.0. Not refused, where Duende's default validator refuses any Scoping.

IsPassive

Whether the sender forbids this server from visibly taking over the user interface.

public bool IsPassive { get; init; }

Property Value

bool

IssueInstant

When the request was issued.

public required DateTimeOffset IssueInstant { get; init; }

Property Value

DateTimeOffset

Issuer

The entity id of the service provider sending the request; empty when it has no Issuer.

public required string Issuer { get; init; }

Property Value

string

NameIdFormat

The NameIDPolicy/@Format the sender asked the subject to be named in, or null when it asked for none (SAML 2.0 core §3.4.1.1).

public string? NameIdFormat { get; init; }

Property Value

string

ProtocolBinding

The ProtocolBinding the sender asked the response to come back on, or null. Duende's.

public string? ProtocolBinding { get; init; }

Property Value

string

RequestedAuthnContext

The authentication context the sender asked for, or null when it asked for none.

public SamlRequestedAuthnContext? RequestedAuthnContext { get; init; }

Property Value

SamlRequestedAuthnContext

Subject

The user the sender asked to have signed in, as its Subject/NameID names them; null when it named nobody.

public SamlNameId? Subject { get; init; }

Property Value

SamlNameId

Remarks

Handed to the login page as its LoginHint, as Duende hands it. Read since 0.145.0.

Version

The SAML version the sender used. Compared rather than assumed.

public string Version { get; init; }

Property Value

string