如何使用Kentor SAML2令牌签署请求

Question

If I want to call some API (rest service) after SAML2 authentication, how can I send signed request with SAML2 token to that IdP API server?

For example I'm signed in, but I want some additional data from IdP. I guess I need to provide SAML2 token.

Answer 1

There is unfortunately no build in support in AuthServices for forwarding the received SAML2 assertion in a REST call.

REST is usually handled by OAuth2/OpendID Connect instead of SAML2. But if you are ready to do some coding yourself you could set the SaveBootstrapContext flag to true in the identity configuration (in web.config if you use that, in SpOptions.SystemIdentityModelIdentityConfiguration if you config in code). That will preserve the assertion on the generated identity. Then you can pick that upp and use it in your REST calls.