blocks|key|2833553|text|为.NET应用程序实现单点登录有多种选择。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2833554|在线查看以下教程：|2833555|+Single+Sign+on基础知识，2012年7月|offset|length|style|BOLD|2833556|http://www.codeproject.com/Articles/429166/Basics-of-Single-Sign-on-SSO|2833557|GaryMcAllisterOnline:+ASP.NET+MVC+4、ADFS2.0和第三方STS集成(IdentityServer2)，2013年1月|2833558|http://garymcallisteronline.blogspot.com/2013/01/aspnet-mvc-4-adfs-20-and-3rd-party-sts.html|2833559|第一个使用ASP.NET网页表单，第二个使用ASP.NET+MVC4。|2833560|如果您的需求允许您使用第三方解决方案，还可以考虑OpenID。有一个名为DotNetOpenAuth.的开源库|2833561|有关更多信息，请阅读MSDN博客文章Integrate+OpenAuth/OpenID+with+your+existing+ASP.NET+application+using+Universal+Providers。|2833562|希望这能有所帮助！|2833563|entityMap|0|LINK|mutability|MUTABLE|url|1|2|https://devblogs.microsoft.com/aspnet/integrate-openauthopenid-with-your-existing-asp-net-application-using-universal-providers/^0|0|0|0|F|0|0|1Z|0|0|0|1X|0|0|2K|1|0|0|10|E|0|I|2I|2|0|0^^$0|@$1|2|3|4|5|6|7|17|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|18|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|19|8|@$F|1A|G|1B|H|I]]|9|@]|A|$]]|$1|J|3|K|5|6|7|1C|8|@]|9|@$F|1D|G|1E|1|1F]]|A|$]]|$1|L|3|M|5|6|7|1G|8|@$F|1H|G|1I|H|I]]|9|@]|A|$]]|$1|N|3|O|5|6|7|1J|8|@]|9|@$F|1K|G|1L|1|1M]]|A|$]]|$1|P|3|Q|5|6|7|1N|8|@]|9|@]|A|$]]|$1|R|3|S|5|6|7|1O|8|@$F|1P|G|1Q|H|I]]|9|@]|A|$]]|$1|T|3|U|5|6|7|1R|8|@]|9|@$F|1S|G|1T|1|1U]]|A|$]]|$1|V|3|W|5|6|7|1V|8|@]|9|@]|A|$]]|$1|X|3|-4|5|6|7|1W|8|@]|9|@]|A|$]]]|Y|$Z|$5|10|11|12|A|$13|K]]|14|$5|10|11|12|A|$13|O]]|15|$5|10|11|12|A|$13|16]]]]

There are multiple options to implement SSO for a .NET application.
Check out the following tutorials online:
Basics of Single Sign on, July 2012
<a href="http://www.codeproject.com/Articles/429166/Basics-of-Single-Sign-on-SSO" rel="nofollow noreferrer">http://www.codeproject.com/Articles/429166/Basics-of-Single-Sign-on-SSO</a>
GaryMcAllisterOnline: ASP.NET MVC 4, ADFS 2.0 and 3rd party STS integration (IdentityServer2), Jan 2013
<a href="http://garymcallisteronline.blogspot.com/2013/01/aspnet-mvc-4-adfs-20-and-3rd-party-sts.html" rel="nofollow noreferrer">http://garymcallisteronline.blogspot.com/2013/01/aspnet-mvc-4-adfs-20-and-3rd-party-sts.html</a>
The first one uses ASP.NET Web Forms, while the second one uses ASP.NET MVC4.
If your requirements allow you to use a third-party solution, also consider OpenID. There's an open source library called DotNetOpenAuth.
For further information, read MSDN blog post <a href="https://devblogs.microsoft.com/aspnet/integrate-openauthopenid-with-your-existing-asp-net-application-using-universal-providers/" rel="nofollow noreferrer">Integrate OpenAuth/OpenID with your existing ASP.NET application using Universal Providers</a>.
Hope this helps!

blocks|key|3046290|text|我来晚了，但对于选项1，我会选择IdentityServer3(.NET+4.6或更低版本)或IdentityServer4+(与Core兼容)。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3046291|您可以在应用程序中重用现有的用户存储，并将其插入到IdentityServer的用户存储中。然后，客户端必须指向您的IdentityServer作为开放id提供者。|3046292|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/IdentityServer/IdentityServer3|1|https://github.com/IdentityServer/IdentityServer4|2|https://docs.asp.net/en/latest/intro.html^0|G|F|0|1B|F|1|1T|4|2|0|0^^$0|@$1|2|3|4|5|6|7|R|8|@]|9|@$A|S|B|T|1|U]|$A|V|B|W|1|X]|$A|Y|B|Z|1|10]]|C|$]]|$1|D|3|E|5|6|7|11|8|@]|9|@]|C|$]]|$1|F|3|-4|5|6|7|12|8|@]|9|@]|C|$]]]|G|$H|$5|I|J|K|C|$L|M]]|N|$5|I|J|K|C|$L|O]]|P|$5|I|J|K|C|$L|Q]]]]

I am late to the party, but for option #1, I would go with 
<a href="https://github.com/IdentityServer/IdentityServer3" rel="noreferrer">IdentityServer3</a>(.NET 4.6 or below) or <a href="https://github.com/IdentityServer/IdentityServer4" rel="noreferrer">IdentityServer4</a> (compatible with <a href="https://docs.asp.net/en/latest/intro.html" rel="noreferrer">Core</a>) .

You can reuse your existing user store in your app and plug that to be IdentityServer's User Store. Then the clients must be pointed to your IdentityServer as the open id provider.

blocks|key|3046341|text|有几个身份提供者具有开箱即用的SSO支持，也有一些第三方**服务。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3046342|**第三方服务的唯一问题是他们可能会按用户/月收费，这可能非常昂贵。|3046343|一些可用工具和用于.NET的API包括：|3046344|IdentityServer|3046345|Centrify+Identity+Service|unordered-list-item|offset|length|3046346|
|3046347|Okta+Identity+(SAML+2.0)|3046348|3046349|OneLogin|3046350|
开发的|3046351|Auth0|3046352|IdentityExpress+(带管理员UI)|3046353|3046354|如果你决定继续你的实现，你可以使用下面按编程语言分类的框架。|3046355|C#:|style|BOLD|3046356|3046357|IdentityServer3+(OAuth/OpenID协议，OWIN/Katana)|3046358|IdentityServer4+(OAuth/OpenID协议，Okta|3046359|的ASP.NET++2.0|3046360|JavaScript:|3046361|3046362|passport-openidconnect+(node.js)|3046363|oidc-provider+(node.js)|3046364|openid-client+(node.js)|3046365|3046366|Python:|3046367|3046368|pyoidc|3046369|Django+OIDC+Provider|3046370|3046371|我会选择Auth0作为一种服务，因为它对前7000名用户是免费的，支持多种语言，而且不需要做太多事情。但是，如果您需要一个更健壮、更易于管理且更便宜的解决方案，我会配置IdentityServer4和ASP.NET核心应用程序，并根据需要添加身份验证提供程序。|3046372|Auth0和IdentityServer4解决方案都使用OAuth/OpenID协议，还支持WS-Auth0和SAML2.0集成。|3046373|entityMap|0|LINK|mutability|MUTABLE|url|https://www.centrify.com/|1|https://www.okta.com/|2|https://www.onelogin.com/|3|https://auth0.com/|4|https://www.identityserver.com/upcoming-products|5^0|0|0|0|0|0|P|0|0|0|0|O|1|0|0|0|8|2|0|0|0|5|3|0|0|F|4|0|0|0|0|3|0|0|W|B|0|0|1|C|0|0|B|0|0|0|W|0|0|N|0|0|N|0|0|0|7|0|0|0|6|0|0|K|0|0|0|3M|4|5|5|0|0|1T|0^^$0|@$1|2|3|4|5|6|7|2G|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|2H|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|2I|8|@]|9|@]|A|$]]|$1|F|3|G|5|6|7|2J|8|@]|9|@]|A|$]]|$1|H|3|I|5|J|7|2K|8|@]|9|@$K|2L|L|2M|1|2N]]|A|$]]|$1|M|3|N|5|6|7|2O|8|@]|9|@]|A|$]]|$1|O|3|P|5|J|7|2P|8|@]|9|@$K|2Q|L|2R|1|2S]]|A|$]]|$1|Q|3|N|5|6|7|2T|8|@]|9|@]|A|$]]|$1|R|3|S|5|J|7|2U|8|@]|9|@$K|2V|L|2W|1|2X]]|A|$]]|$1|T|3|U|5|6|7|2Y|8|@]|9|@]|A|$]]|$1|V|3|W|5|J|7|2Z|8|@]|9|@$K|30|L|31|1|32]]|A|$]]|$1|X|3|Y|5|J|7|33|8|@]|9|@$K|34|L|35|1|36]]|A|$]]|$1|Z|3|-4|5|6|7|37|8|@]|9|@]|A|$]]|$1|10|3|11|5|6|7|38|8|@]|9|@]|A|$]]|$1|12|3|13|5|6|7|39|8|@$K|3A|L|3B|14|15]]|9|@]|A|$]]|$1|16|3|-4|5|6|7|3C|8|@]|9|@]|A|$]]|$1|17|3|18|5|J|7|3D|8|@$K|3E|L|3F|14|15]]|9|@]|A|$]]|$1|19|3|1A|5|J|7|3G|8|@]|9|@]|A|$]]|$1|1B|3|1C|5|6|7|3H|8|@$K|3I|L|3J|14|15]]|9|@]|A|$]]|$1|1D|3|1E|5|6|7|3K|8|@$K|3L|L|3M|14|15]]|9|@]|A|$]]|$1|1F|3|-4|5|6|7|3N|8|@]|9|@]|A|$]]|$1|1G|3|1H|5|J|7|3O|8|@$K|3P|L|3Q|14|15]]|9|@]|A|$]]|$1|1I|3|1J|5|J|7|3R|8|@$K|3S|L|3T|14|15]]|9|@]|A|$]]|$1|1K|3|1L|5|J|7|3U|8|@$K|3V|L|3W|14|15]]|9|@]|A|$]]|$1|1M|3|-4|5|6|7|3X|8|@]|9|@]|A|$]]|$1|1N|3|1O|5|6|7|3Y|8|@$K|3Z|L|40|14|15]]|9|@]|A|$]]|$1|1P|3|-4|5|6|7|41|8|@]|9|@]|A|$]]|$1|1Q|3|1R|5|J|7|42|8|@$K|43|L|44|14|15]]|9|@]|A|$]]|$1|1S|3|1T|5|J|7|45|8|@$K|46|L|47|14|15]]|9|@]|A|$]]|$1|1U|3|-4|5|6|7|48|8|@]|9|@]|A|$]]|$1|1V|3|1W|5|6|7|49|8|@$K|4A|L|4B|14|15]]|9|@$K|4C|L|4D|1|4E]]|A|$]]|$1|1X|3|1Y|5|6|7|4F|8|@$K|4G|L|4H|14|15]]|9|@]|A|$]]|$1|1Z|3|-4|5|6|7|4I|8|@]|9|@]|A|$]]]|20|$21|$5|22|23|24|A|$25|26]]|27|$5|22|23|24|A|$25|28]]|29|$5|22|23|24|A|$25|2A]]|2B|$5|22|23|24|A|$25|2C]]|2D|$5|22|23|24|A|$25|2E]]|2F|$5|22|23|24|A|$25|2C]]]]

There are several Identity providers with SSO support out of the box, also some third-party** services.
** The only problem with third-party services is that they might charge per user/month, which can be pretty expensive.
Some of the tools available and with APIs for .NET are:
<ul>
<li><a href="https://auth0.com/" rel="nofollow noreferrer">Auth0</a></li>
<li><a href="https://www.identityserver.com/upcoming-products" rel="nofollow noreferrer">IdentityExpress</a> (with Admin UI) by IdentityServer</li>
<li><a href="https://www.centrify.com" rel="nofollow noreferrer">Centrify Identity Service</a></li>
<li><a href="https://www.okta.com" rel="nofollow noreferrer">Okta Identity (SAML 2.0)</a></li>
<li><a href="https://www.onelogin.com/" rel="nofollow noreferrer">OneLogin</a></li>
</ul>
If you decide to go with your implementation, you could use the frameworks below categorized by programming language.
C#:
<ul>
<li>IdentityServer3 (OAuth/OpenID protocols, OWIN/Katana)</li>
<li>IdentityServer4 (OAuth/OpenID protocols, ASP.NET Core)</li>
<li>OAuth 2.0 by Okta</li>
</ul>
JavaScript:
<ul>
<li>passport-openidconnect (node.js)</li>
<li>oidc-provider (node.js)</li>
<li>openid-client (node.js)</li>
</ul>
Python:
<ul>
<li>pyoidc</li>
<li>Django OIDC Provider</li>
</ul>
I would go with <a href="https://auth0.com/" rel="nofollow noreferrer">Auth0</a> as a service, as it's free for the first 7000 users, supports many languages, and not much needs to be done. However, if you need a more robust, manage yourself, and cheaper solution, I would configure IdentityServer4 and ASP.NET Core application and add authentication providers as necessary.
Both Auth0 and IdentityServer4 solutions use OAuth/OpenID protocols, supporting also WS-Federation and SAML 2.0 integration.

blocks|key|3046390|text|UltimateSAML+SSO是一个兼容OASIS+SAMLv1.x和v2.0规范的.NET工具包。它提供了一种优雅而简单的方法，可以将对单点登录和单点注销的支持添加到ASP.NET、ASP.NET+MVC、ASP.NET核心、桌面和服务应用程序中。轻量级库可帮助您使用单个凭据条目提供对云和intranet网站的SSO访问。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3046391|Detailed+UltimateSAML+SSO+review+can+be+found+here|offset|length|3046392|entityMap|0|LINK|mutability|MUTABLE|url|http://www.thedownloadplanet.com/reviews/review-saml-single-sign-on-for-asp-net/^0|0|0|1E|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

UltimateSAML SSO is an OASIS SAML v1.x and v2.0 specifications compliant .NET toolkit. It offers an elegant and easy way to add support for Single Sign-On and Single-Logout SAML to your ASP.NET, ASP.NET MVC, ASP.NET Core, Desktop, and Service applications. The lightweight library helps you provide SSO access to cloud and intranet websites using a single credentials entry. 

<a href="http://www.thedownloadplanet.com/reviews/review-saml-single-sign-on-for-asp-net/" rel="nofollow noreferrer">Detailed UltimateSAML SSO review can be found here</a>

blocks|key|3046413|text|免责声明:我是贡献者之一|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3046414|我们构建了一个非常简单的免费/开源组件，它为ASP.NET应用程序https://github.com/jitbit/AspNetSaml添加了SAML支持|offset|length|3046415|基本上，它只是一个简短的C#文件，您可以将其放入您的项目(或通过Nuget安装)并在您的应用程序中使用它|3046416|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/jitbit/AspNetSaml^0|0|X|10|0|0|0^^$0|@$1|2|3|4|5|6|7|P|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|Q|8|@]|9|@$D|R|E|S|1|T]]|A|$]]|$1|F|3|G|5|6|7|U|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|V|8|@]|9|@]|A|$]]]|I|$J|$5|K|L|M|A|$N|O]]]]

[disclaimer: I'm one of the contributors]

We built a very simple free/opensource component that adds SAML support for ASP.NET apps <a href="https://github.com/jitbit/AspNetSaml" rel="nofollow noreferrer">https://github.com/jitbit/AspNetSaml</a>

Basically it's just one short C# file you can throw into your project (or install via Nuget) and use it with your app

I am tasked with implementing single sign-on for our customers as part of our next release. The flow exists as follows: 

<ol>
<li>User logs into their school's main portal system using a student id/password provided to him/her by the school. </li>
<li>User clicks the link to my company's product.</li>
<li>User is automatically taken to the dashboard page as if they had just logged in through the login form on our site.</li>
</ol>

Thus, there are two mechanisms by which a user can be authenticated into our site:

<ol>
<li>Coming to our product's home page, and logging in using the email/password that we store in our local system.</li>
<li>Using the single sign-on where the student has already logged into the school's main system with a student id and password.</li>
</ol>

If our product's implementation is in ASP.NET (as opposed to Java/Ruby), should we be using CAS, JOSSO, or some other third party single sign-on product? Or is there something available to a .NET environment which would be simpler for us as a .NET company?

C# ASP.NET Single Sign-On Implementation

身份验证

单点登录

Python

OAuth

Java

我的任务是为我们的客户实现单点登录，作为我们下一个版本的一部分。该流程的存在方式如下：用户使用学校提供的学生id/密码登录到学校的主要门户系统。用户单击指向我的公司产品的链接。用户将自动转到仪表板页面，就像他们刚刚通过我们网站上的登录表单登录一样。因此，有两种机制可以让用户通过认证进入我们的站点：打开我们产品的主页，使...

问C# ASP.NET单点登录实施
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问C# ASP.NET单点登录实施EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问C# ASP.NET单点登录实施
EN