Hi Everyone

About to embark on a Single Sign On project on DotnetNuke using the Component Space SAML 2.0 .NET toolkit integrating with ADFS.  We have partnered with another company in our industry which will be the Identity provider (IP). We will be the service provider (SP).

The process will work as follows:

1. The user is logged into a web site at the IP and clicks on a link to our third party application.  This directs them to the landing page for the partner service they want to access.
2. The partner web service receives an http GET request and attempts to authenticate the user.  However, the initial request contains no authentication information so the service re-directs the browser to the Federation Server.
3. The federation server determines that the user is trying to login using Single Sign-on from the web site and re-directs the browser to that web site to provide credentials.
4. The web site validates that the user is logged in and builds a set of claims.  These are signed and sent back to the browser to post to the Federation Server.  Note: If the user is not logged into the web site they will be presented to login.  This may occur is a user has bookmarked a web page on the partner site.
5. The Federation Server validates the claims provided by the web site and generates the credentials necessary to access the third party web site.  These credentials are built into the set of claims agreed with the service partner.  The claims are signed using the agreed private key and are sent back to the browser.
6. The web browser posts the signed claims to the partner web site, which is now able to authenticate the user and display the web application.

Does anybody have any experience or recommendations on what the best approach with this is considering that we already use the DNN membership provider & database and we have registered users. All our modules rely heavily on DNN profile properties so not a straightforward call with claims to call on the correct data for that user.

Just starting to get my head around how this will work so any pointers or advice is appreciated.

Cheers