SSO and IdentityServer with services that expect SAML and JWT

Question

I'm using IdentityServer4 with OpenID Connect and OAuth2.

I need to enable SSO with some legacy services that support SAML.

Can someone explain (or point me to a good article) explaining how this could be achieved?

Would I need to request a SAML token from IdentityServer for my JWT token that I can pass to the legacy service? Or could I embed the SAML token into the JWT ID token which can then be extracted and passed to the legacy service?

user_280222 · Answer

You need a SAML2P plugin for IdentityServer4, there's an experimental version at https://leastprivilege.com/2017/10/13/saml2p-identity-provider-support-for-identityserver4/

nzpcmad_9922 · Answer

As @Anders says, there is a beta version developed by Rock Solid Knowledge.

This only handles client-side SAML at the moment.

What is your exact use case?

SSO and IdentityServer with services that expect SAML and JWT

2 Answers