Ok I must be missing something. I have backoffice & membership integration with ADFS (on premesis). Both seem to work at first, but after login, the browser is redirected to a post (not a get request!) request of the login page and I am not logged in. What am I missing?
There are no errors logged.
Update, I have a fix for the backoffice logins. Will post details later
Aaron Sawyer
02/21/2024, 9:39 PM
Ok, so there were two things missing in my above code:
1. The CallbackPath must be set and be unique for each login type (backoffice vs membership). The callbackpath is the url that the middleware will take over to handle authentication - this is not the return url for the user.
2. There is a bug / breaking change in .NET Core. You have to use an alternate Saml Parser file. See here: https://github.com/AzureAD/azure-activedirectory-identitymodel-extensions-for-dotnet/issues/2406