Single Sign On - 2.0 Web Service Membership Provider

Patch Uploaded: #4481

markw5 — Fri, 20 Nov 2009 10:53:42 GMT

markw5 has uploaded a patch.

Description:
Hi Guys, thanks for putting your great project online.

I've added functionality on the attached patch to enable multiple providers/applications. The SSOSite/Web.config can now define multiple providers for different clients. The client's provider name corresponds to the provider used by the service. I noticed a few questions in the forum relating to managing multiple applicationNames - this patch enables that.

The client passes the provider name in a soap header then the server chooses the correct provider from the Membership.Providers collection for each operation. I also added the functionality for roles. You just need to make sure each membership provider has a corresponding role provider defined in web.config.

I made changes to the admin pages too so you can select the provider when managing users enabling you to manage users from multiple apps/providers.

Let me know if you have any questions.
Cheers
Mark

Updated Wiki: Home

nlb6665 — Tue, 08 Sep 2009 14:18:11 GMT

New Post: InvalidRegistration

subflux — Mon, 07 Sep 2009 14:57:10 GMT

Hi,

Having unzipped the code, I fired up the SingleSignOn_2008.sln in Visual Studio.

Kicking off SSOSite in the VS Dev Server, I can log into the SSOSite application fine.

Trying to log into SSOTestSite yeilds

Server Error: InvalidRegistration:

Server Error in '/SSOTestSite' Application.

Server Error: InvalidRegistration:

Description: An unhandled exception occurred during the execution of the current web request. Please review the stack trace for more information about the error and where it originated in the code.

Exception Details: IWS.Lib.SingleSignOn.ServiceException: Server Error: InvalidRegistration:

Source Error:

An unhandled exception was generated during the execution of the  current web request. Information regarding the origin and location of the  exception can be identified using the exception stack trace below.

Stack Trace:

[ServiceException: Server Error: InvalidRegistration: ]
   IWS.Lib.SingleSignOn.WebServiceMembershipProvider.ValidateUser(String username, String password) in C:\Documents and Settings\Nathan\Desktop\deploy\SingleSignOn\WebServiceMembershipProvider.cs:520
   System.Web.UI.WebControls.Login.AuthenticateUsingMembershipProvider(AuthenticateEventArgs e) +60
   System.Web.UI.WebControls.Login.OnAuthenticate(AuthenticateEventArgs e) +119
   System.Web.UI.WebControls.Login.AttemptLogin() +115
   System.Web.UI.WebControls.Login.OnBubbleEvent(Object source, EventArgs e) +101
   System.Web.UI.Control.RaiseBubbleEvent(Object source, EventArgs args) +37
   System.Web.UI.WebControls.Button.OnCommand(CommandEventArgs e) +118
   System.Web.UI.WebControls.Button.RaisePostBackEvent(String eventArgument) +166
   System.Web.UI.WebControls.Button.System.Web.UI.IPostBackEventHandler.RaisePostBackEvent(String eventArgument) +10
   System.Web.UI.Page.RaisePostBackEvent(IPostBackEventHandler sourceControl, String eventArgument) +13
   System.Web.UI.Page.RaisePostBackEvent(NameValueCollection postData) +36
   System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint) +1565

Changing the ServiceMode to Dynamic doesn't help either.

Anyone come across this before? How can I proceed?

Thanks,

Kenny

New Post: how do use?

tanwen — Wed, 02 Sep 2009 09:35:32 GMT

I don't know how can I use this solution in my web application.
can anybody help me?

please tell me how to use the SingleSignOn MemberShip ?

New Post: Custom membership provider using a WCF service

uet — Tue, 02 Jun 2009 06:18:32 GMT

Hi,

I am trying to develop a custom membership provider for ASP.net. The requirement is that the DB should not be directly connected with the ASP site, even it is not available on the same webserver. The connection should be through a WCF service which in turn connects with the DB. So in simple words there are three tiers the Presentation, Communication, and Data.

This project is much similar to the one I need, can anyone help me find out the way how to do it through a WCF service instead of a web service.

Any help is appreciated.

Regards,

Uetian

New Post: When does document come out?

lucker119 — Thu, 18 Dec 2008 04:43:50 GMT

hi,
Now I'using the framework, I seriously need document about it, who can help me?

New Post: DNN Module

blu — Wed, 17 Dec 2008 18:34:10 GMT

I have done sso integration with DNN, it's in production.

Reviewed: SingleSignOn 2.0 Beta (Dec 04, 2008)

vijaykarla — Thu, 04 Dec 2008 13:40:19 GMT

Rated 3 Stars (out of 5) - Trying to iplement this idea ;-)

New Post: Proxy

eGlashagen — Mon, 25 Aug 2008 18:46:47 GMT

Hi all,

does somebody know how to use SSO when a proxy-server is required?

Thanks
Erich

New Post: Integrate multiplae webApplications

nadi — Thu, 21 Aug 2008 06:27:41 GMT

Hi ,
I have a sharepoint site (Windows Sharepoint Services 2007) and I want to integrate it with some web-applications ,as,when somebody login to sharepoint site,automatically login into other web-applications(Single Sign on).
So,I download the SingleSignOn project from this site and run it,but I just have seen this web page(http://localhost:2206/SSOSite).
I don't know how can I use this solution in my case.
can anybody help me?

New Post: How to enable password retrieval?

massany — Sat, 16 Aug 2008 07:20:58 GMT

首先在web.config的system.web节中配置machineKey：
<system.web>
<machineKey validationKey="590FBF83DE4DB1034483D319AAE5C925CB6175D8C4E23FF8AB7E51CF7B713F7E21B0A0CC39CFA126E092655752E36DE68A2B7549D59330164B9531A32004A170" decryptionKey="5EF9212A6C456ABA7526895BB6BF5145743C12D9ACE4927C9691BA869B806DA0" validation="SHA1" decryption="AES"/>
<system.web>

然后配置Mebership:
        <membership defaultProvider="DefaultProvider">
            <providers>
                <add connectionStringName="MySqlServer" applicationName="NajiaUserHost" enablePasswordRetrieval="true" enablePasswordReset="true" requiresQuestionAndAnswer="false" requiresUniqueEmail="false" passwordFormat="Encrypted" maxInvalidPasswordAttempts="5" passwordAttemptWindow="10" name="DefaultProvider" autogenerateschema="true" writeExceptionsToEventLog="true" type="MySql.Web.Security.MySQLMembershipProvider"/>
            </providers>
        </membership>

New Post: SSO to Member Portal

dowens — Thu, 07 Aug 2008 12:13:58 GMT

I've not ever setup a SSO.
Requirements are, Client application (that's me) constructs encryped information: client's ID and Member's Info.
Client send URL request to Member Portal (passing via URL).

Encryption Technologies supported for Member Portal:
DES, 2DES, X.509

I'm new at web development and this is my first request for a SSO.
I was instructed to search for some code libraries for RSA encryption and AES encryption.
I've searched, but I have no clue what to do next!

My hardware is windows server 2003, I use dreamweaver to develop web sites.

Please, I realy need help!

How do I begin?

New Post: How to enable password retrieval?

tom2275 — Tue, 22 Jul 2008 23:02:51 GMT

My application currently returns an Exception "This membership Provider has not been configured to support password retrieval"

Is this even possible? If so any clues how?

Thanks,

NEW POST: DNN Module

fawad85a — Fri, 09 May 2008 10:55:27 GMT

Hye there,
i m seriously having problem in setting up the webservice. first i m telling you my scenario and the can you please guide me that where i m needed to make changes.

I have a dnn website and a web app. Both are following form authentication. i have shared the cookie and authentication is working now. Client require profiling and user account setting from the web app as the database is with DNN website.
my question is why do we require a webservice in between to share data, i mean can't we provide connection string of the database in web app and can't we do this task in that way.
Any ways i tried your project i change the connection string of the webservice to the DNN database and i changed the class library connection string too and then i checked test site, nothing happened. i couldn't sign in that test site with DNN user name.
i didn't update the reference of test site imagining that referenced is direct from the project.

Can you guide me through the steps.

i m doing the same thing i m having the same problem
Have you sorted out the problem?

NEW POST: SingleSignon and Many Apps

fawad85a — Thu, 08 May 2008 16:06:15 GMT

Hye nathan,
i m seriously having problem in setting up the webservice. first i m telling you my scenario and the can you please guide me that where i m needed to make changes.

I have a dnn website and a web app. Both are following form authentication. i have shared the cookie and authentication is working now. Client require profiling and user account setting from the web app as the database is with DNN website.
my question is why do we require a webservice in between to share data, i mean can't we provide connection string of the database in web app and can't we do this task in that way.
Any ways i tried your project i change the connection string of the webservice to the DNN database and i changed the class library connection string too and then i checked test site, nothing happened. i couldn't sign in that test site with DNN user name.
i didn't update the reference of test site imagining that referenced is direct from the project.

Can you guide me through the steps.

UPDATED WIKI: Home

nlb6665 — Tue, 29 Apr 2008 23:29:20 GMT

UPDATED WIKI: Home

nlb6665 — Tue, 29 Apr 2008 23:29:00 GMT

UPDATED WIKI: Home

nlb6665 — Tue, 29 Apr 2008 23:28:36 GMT

UPDATED WIKI: Home

nlb6665 — Tue, 29 Apr 2008 22:49:16 GMT

UPDATED WIKI: Home

nlb6665 — Tue, 29 Apr 2008 22:48:55 GMT

Project Description
In short, this is simply a pass-through web service membership provider and role provider library. I've taken advantage of the 2.0 membership provider model to allow pre-existing applications to easily integrate this library. The idea is to have one centrally hosted asp.net web application containing all the user accounts that will be shared among many other applications and provide a web service for those applications to use its authentication functions. The download includes: a sample host server, provider client libraries, sample web client, and sample windows client.

Donations
I have gotten a few requests about donations to the project. Feel free to click this link an contribute any amount you wish. We greatly appreciate your support.
{"<form action="https://www.paypal.com/cgi-bin/webscr" method="post">
<input type="hidden" name="cmd" value="_s-xclick">
<input type="image" src="https://www.paypal.com/enUS/i/btn/btndonate_SM.gif" border="0" name="submit" alt="PayPal - The safer, easier way to pay online!">
<img alt="" border="0" src="https://www.paypal.com/en_US/i/scr/pixel.gif" width="1" height="1">
<input type="hidden" name="encrypted" value="-----BEGIN PKCS7-----MIIHVwYJKoZIhvcNAQcEoIIHSDCCB0QCAQExggEwMIIBLAIBADCBlDCBjjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRQwEgYDVQQKEwtQYXlQYWwgSW5jLjETMBEGA1UECxQKbGl2ZV9jZXJ0czERMA8GA1UEAxQIbGl2ZV9hcGkxHDAaBgkqhkiG9w0BCQEWDXJlQHBheXBhbC5jb20CAQAwDQYJKoZIhvcNAQEBBQAEgYA0yXSdeJMuFRBN844nzcq1FtHpwsv9eheU5pF8883n0J8MiI/PsMvMX5rmQlH4IdkCYejvMEyz898pH9q4NXVblhbH/aBExD5Vmtgn1EC0ByQtlTdw0hTd8OvFwNuTTC82tVNRBAiHy1kRwSfyHM4dPAZQdR4PfU659wERrbzELMAkGBSsOAwIaBQAwgdQGCSqGSIb3DQEHATAUBggqhkiG9w0DBwQIaSob23g3sRGAgbBFN3DLSauz4cqrdJRtAgxZC6cyOTZ/2smYCsY0UbXDayKQ1ZrDx3dVxILeAPngsRt5zCz53oNfoCVsywvs4PovHV3Wig7tA7i9qODHzfqtvTcv2YyLqrEN6JyRnuuCcsX27DIv/K9SWGB4JO/cPzFZOexhmjpPiIqMHGHmhdbkAooXCE78sPk89I42BvqhCaOYEPokTcbJTSNNfbEEAJ6JppeJAihS5l9HMa1DwzSaCCA4cwggODMIIC7KADAgECAgEAMA0GCSqGSIb3DQEBBQUAMIGOMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxFDASBgNVBAoTC1BheVBhbCBJbmMuMRMwEQYDVQQLFApsaXZlX2NlcnRzMREwDwYDVQQDFAhsaXZlX2FwaTEcMBoGCSqGSIb3DQEJARYNcmVAcGF5cGFsLmNvbTAeFw0wNDAyMTMxMDEzMTVaFw0zNTAyMTMxMDEzMTVaMIGOMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0ExFjAUBgNVBAcTDU1vdW50YWluIFZpZXcxFDASBgNVBAoTC1BheVBhbCBJbmMuMRMwEQYDVQQLFApsaXZlX2NlcnRzMREwDwYDVQQDFAhsaXZlX2FwaTEcMBoGCSqGSIb3DQEJARYNcmVAcGF5cGFsLmNvbTCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAwUdO3fxEzEtcnI7ZKZL412XvZPugoni7i7D7prCe0AtaHTc97CYgm7NsAtJyxNLixmhLV8pyIEaiHXWAh8fPKWR017EmXrr9EaquPmsVvTywAAE1PMNOKqo2kl4Gxiz9zZqIajOm1fZGWcGS0f5JQ2kBqNbvbg2/ZaGJ/qwUCAwEAAaOB7jCB6zAdBgNVHQ4EFgQUlp98u8ZvF71ZP1LXChvsENZklGswgbsGA1UdIwSBszCBsIAUlp98u8ZvF71ZP1LXChvsENZklGuhgZSkgZEwgY4xCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJDQTEWMBQGA1UEBxMNTW91bnRhaW4gVmlldzEUMBIGA1UEChMLUGF5UGFsIEluYy4xEzARBgNVBAsUCmxpdmVfY2VydHMxETAPBgNVBAMUCGxpdmVfYXBpMRwwGgYJKoZIhvcNAQkBFg1yZUBwYXlwYWwuY29tggEAMAwGA1UdEwQFMAMBAf8wDQYJKoZIhvcNAQEFBQADgYEAgV86VpqAWuXvX6Oro4qJ1tYVIT5DgWpE692Ag422H7yRIr/9j/iKG4Thia/Oflx4TdLIFJBAyPK9v6zZNZtBgPBynXb048hsP16l2vi0k5Q2JKiPDsEfBhGIHnxLXEaUWAcVfCsQFvd2A1sxRr67ip5y2wwBelUecP3AjJYcxggGaMIIBlgIBATCBlDCBjjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRYwFAYDVQQHEw1Nb3VudGFpbiBWaWV3MRQwEgYDVQQKEwtQYXlQYWwgSW5jLjETMBEGA1UECxQKbGl2ZV9jZXJ0czERMA8GA1UEAxQIbGl2ZV9hcGkxHDAaBgkqhkiG9w0BCQEWDXJlQHBheXBhbC5jb20CAQAwCQYFKw4DAhoFAKBdMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTA4MDQyOTIyNDYwN1owIwYJKoZIhvcNAQkEMRYEFDIJrm1wZXmabk1v2tyPIFC56dCMA0GCSqGSIb3DQEBAQUABIGAbehytPwxXbsgov0aGbGoBQ1EEgImIbHe/LHvpxBrPqn0Hkt4EwPKHhIbxcV2VrUU22B4ISxQCbv8e5ElVFkQoHvVh162c4VZ9bdJUdAKd24efVVcAO4wwWDxhcLnseR8ILNEsyxGZWsxlMDJBBQ2jb+SLUExLzCtlQeWdyDSA=-----END PKCS7-----
">
</form>"}

Notes
Originally I built this application to be the central authentication system of about ten or so in-house applications. All these ran on a local intranet, and I was tired of handing out ten usernames and passwords for each person to login to each application, so I designed a system similar to this one (using .NET 1.0 and web services). The solution worked great for our local and remote users.

So now I've designed a new set of applications taking advantage of the built-in membership provider model and web services in .NET 2.0. The idea is to link all your internal .net driven applications to authenticate with one system and allow remote users use the same user base. It's geared for web applications, but can be used for windows desktop applications with access to the host web services.

Thanks to the guys working on SubSonic! I used SubSonic for my data access layer in these projects.

Beta Testers and feedback are welcome. I'd like to hear what people have to say. Is this something you can use? If someone already has something like this, how does it compare? etc.

Here's a diagram showing the basic application architecture of this solution.