Error – A SignInResponse message may only redirect within the current web application – MVC 2.0 application

I’ve been tearing my hair out on this one. I too have the trailing slash specified in my configuration. Turns out that, in my case, navigating to my app with a trailing slash in the browser like so: http://localhost/myapp/ will work, whereas http://localhost/myapp will not. If I can dig up some more reasons why this … Read more

What is the purpose of nameidentifier claim?

Name, is just that a name. If we’re talking person, think “Eric”; a server “file01”. A NameIdentifier is the ID for an object. Turning back to our person object, Eric’s UserID might be 435 in your database. For the server the Identifier could be something like a FQDN or a SID. According to this post, … Read more

Differences between SP initiated SSO and IDP initiated SSO

IDP Initiated SSO From PingFederate documentation :- https://docs.pingidentity.com/bundle/pf_sm_supportedStandards_pf82/page/task/idpInitiatedSsoPOST.html In this scenario, a user is logged on to the IdP and attempts to access a resource on a remote SP server. The SAML assertion is transported to the SP via HTTP POST. Processing Steps: A user has logged on to the IdP. The user requests access … Read more