Ключевые слова: SAML, SSO, ASP.NET

SAML Profiles

All SAML v2.0 profiles are fully supported, acting as either the identity provider or service provider.
-Web browser single sign-on (identity provider and service provider initiated)
-Single logout
-Artifact resolution
-Identity provider discovery
-Authentication, attribute and assertion query
-Name identifier management and mapping

SAML Protocols

All SAML v2.0 protocols are fully supported.
-Create, modify and access SAML protocol messages
-Serialize SAML messages to and from XML
-Generate and verify XML signatures (SHA-1 and SHA-2) on SAML messages

SAML Bindings

All SAML v2.0 bindings are fully supported.
-HTTP POST
-HTTP Redirect
-HTTP Artifact
-SOAP
-PAOS
-SAML URI

SAML Assertions

SAML v2.0 assertions are fully supported.
-Create, modify and access SAML assertions
-Serialize SAML assertions to and from XML
-Generate and verify XML signatures (SHA-1 and SHA-2) on SAML assertions
-Encrypt and decrypt SAML assertions, attributes and identifiers

SAML Metadata

SAML v2.0 metadata is fully supported.
-Create, modify and access all SAML metadata
-Serialize to and from XML
-Generate and verify XML signatures (SHA-1 and SHA-2) on SAML metadata

High-Level API

A high-level, configuration-driven API provides a very simple to use interface that hides the mechanics of SAML SSO. This makes it easy to add SSO functionality to your web application with just a few lines of code. Configuration changes, including adding support for additional partner identity providers or service providers, may be made with zero code changes.

Low-Level API

A low-level API provides complete control and flexibility. The API provides accesses to the SAML profiles, protocols, bindings, assertions and metadata. For most scenarios, the high-level API provides all the control you need in a simpler interface. For those situations where this isn't enough, the low-level API is available.