Class SamlAuthenticationOptions

Namespace

Fdyay.IdentityServer.Saml.Sp

Assembly

Fdyay.IdentityServer.Saml.dll

A stored SAML provider's settings a host can override, per scheme, in code.

public class SamlAuthenticationOptions : AuthenticationSchemeOptions

Inheritance

object

AuthenticationSchemeOptions

SamlAuthenticationOptions

Inherited Members

AuthenticationSchemeOptions.Validate()

AuthenticationSchemeOptions.Validate(string)

AuthenticationSchemeOptions.ClaimsIssuer

AuthenticationSchemeOptions.Events

AuthenticationSchemeOptions.EventsType

AuthenticationSchemeOptions.ForwardDefault

AuthenticationSchemeOptions.ForwardAuthenticate

AuthenticationSchemeOptions.ForwardChallenge

AuthenticationSchemeOptions.ForwardForbid

AuthenticationSchemeOptions.ForwardSignIn

AuthenticationSchemeOptions.ForwardSignOut

AuthenticationSchemeOptions.ForwardDefaultSelector

AuthenticationSchemeOptions.TimeProvider

object.Equals(object)

object.Equals(object, object)

object.GetHashCode()

object.GetType()

object.MemberwiseClone()

object.ReferenceEquals(object, object)

object.ToString()

Remarks

Duende 8.0.1's SamlAuthenticationOptions, measured: named options for each saml scheme, filled from the stored row and DynamicProviderOptions first, so a host's services.Configure<SamlAuthenticationOptions>(scheme, …) or PostConfigure sees those values and replaces the ones it names. What it settles wins over the row; what it leaves null falls back to the row.

An AuthenticationSchemeOptions because Duende's is, and because that is what lets the same mechanism that fills a handler's options from a row fill these.

Properties

OutboundSigningAlgorithm

The signature method this server signs its messages to the provider with.

public string? OutboundSigningAlgorithm { get; set; }

Property Value

string

SignInScheme

The cookie a signed-in user lands in. Null falls back to DynamicProviderOptions.SignInScheme.

public string? SignInScheme { get; set; }

Property Value

string

SignOutScheme

The session an inbound LogoutRequest ends. Null falls back to DynamicProviderOptions.SignOutScheme.

public string? SignOutScheme { get; set; }

Property Value

string

SpEntityId

The entity id this server presents. Null falls back to the row's, then to this server's issuer.

public string? SpEntityId { get; set; }

Property Value

string

WantAssertionsSigned

Whether this server asks for signed assertions.

public bool? WantAssertionsSigned { get; set; }

Property Value

bool?

Remarks

Carried for Duende's shape, and not able to turn the requirement off: this server's service provider refuses an unsigned assertion whatever this says, and its metadata says WantAssertionsSigned="true" because that is what it does. A scheme configured to ask for less is logged as a warning when its options are built.