How can I enable both okta and auth0 for a tenant using openid #12204

0

oguzhanagir created 2 months ago

Support Team

Hi kansoftware

To enable both Okta and Auth0 for a single tenant in your multi-tenant application, you will need to customize the code, as the standard ASP.NET Zero implementation typically supports only one OpenID Connect provider per tenant.

0

kansoftware created 2 months ago

Hi kansoftware

To enable both Okta and Auth0 for a single tenant in your multi-tenant application, you will need to customize the code, as the standard ASP.NET Zero implementation typically supports only one OpenID Connect provider per tenant.

Ok. For now I have enabled okta through oidc. I have added the default options in startup.cs. But also I have configured the openid for a tenant through tenant settings page. I want to know how and where does it replaces the client id and other details before redirecting to okta login page.

As for my custom code I want to set the credentials runtime because for each tenant it will be different. I hope I am making sense

0

kansoftware created 2 months ago

I want to set OpenIdConnectOptions during runtime for tenant. Is it possible if yes then how?

0

maliming created 2 months ago

Support Team

hi

These classes allow you to change the options at runtime. They get tenant settings values( from the database).

In fact, you can add multiple OpenIdConnect as authentication providers.

authenticationBuilder.AddOpenIdConnect("Auth0", options => ...

authenticationBuilder.AddOpenIdConnect("Okta", options =>

The name is the Auth0 or Okta

0

kansoftware created 2 months ago

Can I call these function on login button in Account controller to set options at runtime? If yes then how

0

maliming created 2 months ago

Support Team

hi

Yes, See https://github.com/aspnetzero/aspnet-zero-core/commit/7541fa92769e0ff340ccfb9424a5f58c62ca1c08

0

kansoftware created 21 days ago

hi

Yes, See https://github.com/aspnetzero/aspnet-zero-core/commit/7541fa92769e0ff340ccfb9424a5f58c62ca1c08

I create a ExternalLoginCustom method in Account controller. In this function I wrote using (_openIdConnectOptions.As<TenantBasedOpenIdConnectOptions>().Change(new OpenIdConnectOptions())) {
}

First it says TenantBasedOpenIdConnectOptions does contain a function Change. Also the link you have shared has expired I believe, its not working.

Also how should I set the optons in the using block.

0

oguzhanagir created 21 days ago

Support Team

Hi

To access the relevant link. After logging in with the user who has the plan on the aspnetzero.com website, clicking the manage button under the Account button, you can give permission to the github user you are trying to log in from the Github Members tab on the relevant page.

0

kansoftware created 21 days ago

Let me share you my complete scenario. I have a multi tenant application. I want to enable both okta and auth0 for each tenant. As asp.net zero support only one authentication for a single tenant, I understand I need to customize the code. For this I will create a entity which will have configuration details like client id, secret etc. tenant wise for different providers. I have enabled AllowSocialLoginSettingsPerTenant in appsettings and setup OpenId with default values. Now when ExternalLogin function gets called in Account controller on openidconnect login button, I believe it gets the default set values.

public ActionResult ExternalLogin(string provider, string returnUrl, string ss = "")
{
    var redirectUrl = Url.Action(
        "ExternalLoginCallback",
        "Account",
        new
        {
            ReturnUrl = returnUrl,
            authSchema = provider,
            ss = ss
        });

    var properties = _signInManager.ConfigureExternalAuthenticationProperties(provider, redirectUrl);            

    return Challenge(properties, provider);
}

But here I want to get the custom configuration for a tenant either for auth0 or okta and accordingly redirect at runtime.

Could you please help me with the custom code I need to place in ExternalLogin function.

0

maliming created 19 days ago

Support Team

hi

Have you checked the source that I shared?

I have a multi tenant application. I want to enable both okta and auth0 for each tenant. As asp.net zero support only one authentication for a single tenant, I understand I need to customize the code.

You can add multiple OpenIdConnect as authentication providers. The string provider will be Auth0 or Okta

authenticationBuilder.AddOpenIdConnect("Auth0", options => ...
authenticationBuilder.AddOpenIdConnect("Okta", options =>

public ActionResult ExternalLogin(string provider, string returnUrl, string ss = "")
{
    using (_googleOptions.As<TenantBasedOpenIdConnectOptions>().Change(new OpenIdConnectOptions()))
    {
        // Change the client id and secret to current OpenIdConnectOptions
        
        var redirectUrl = Url.Action(
        "ExternalLoginCallback",
        "Account",
        new
        {
            ReturnUrl = returnUrl,
            authSchema = provider,
            ss = ss
        });

        var properties = _signInManager.ConfigureExternalAuthenticationProperties(provider, redirectUrl);            
    
        return Challenge(properties, provider);
    }
}

https://github.com/aspnetzero/aspnet-zero-core/commit/7541fa92769e0ff340ccfb9424a5f58c62ca1c08 https://support.aspnetzero.com/QA/Questions/12204/How-can-I-enable-both-okta-and-auth0-for-a-tenant-using-openid#answer-0665e369-ea30-363f-9ae6-3a15cec05d04

0

kansoftware created 12 days ago

Let me share you my complete scenario. I have a multi tenant application. I want to enable both okta and auth0 for each tenant. As asp.net zero support only one authentication for a single tenant, I understand I need to customize the code. For this I will create a entity which will have configuration details like client id, secret etc. tenant wise for different providers.
I have enabled AllowSocialLoginSettingsPerTenant in appsettings and setup OpenId with default values. Now when ExternalLogin function gets called in Account controller on openidconnect login button, I believe it gets the default set values.
public ActionResult ExternalLogin(string provider, string returnUrl, string ss = "") 
{ 
    var redirectUrl = Url.Action( 
        "ExternalLoginCallback", 
        "Account", 
        new 
        { 
            ReturnUrl = returnUrl, 
            authSchema = provider, 
            ss = ss 
        }); 
 
    var properties = _signInManager.ConfigureExternalAuthenticationProperties(provider, redirectUrl);             
 
    return Challenge(properties, provider); 
} 
But here I want to get the custom configuration for a tenant either for auth0 or okta and accordingly redirect at runtime.

Could you please help me with the custom code I need to place in ExternalLogin function.

After seeing the source commit you shared, I updated my code as it is. But when trying to dynamically updating on externallogin function it didn't work. Below is the code

[HttpPost]
public ActionResult ExternalLogin(string provider, string returnUrl, string ss = "")
{
    using (_openIdConnectOptions.As<TenantBasedOpenIdConnectOptions>().Change(new OpenIdConnectOptions {
        ClientId = "xxxxxxxxxxxxxxxxxxx",
        ClientSecret = "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
        Authority = "https://dev-76726332.okta.com/oauth2/default",
        ResponseType = "code",
        Scope = { "openid", "profile", "email" }
    }))
    {               

        var redirectUrl = Url.Action(
        "ExternalLoginCallback",
        "Account",
        new
        {
            ReturnUrl = returnUrl,
            authSchema = provider,
            ss = ss
        });


        var properties = _signInManager.ConfigureExternalAuthenticationProperties(provider, redirectUrl);

        return Challenge(properties, provider);
    }
    
}

Could you please help me to figure this out that where and how can change the options?

Also could you please explain what exactly the changes in the source means

0

maliming created 8 days ago

Support Team

hi

Can you share your test project?

I will download and debug it.

Thanks.

[email protected]

12 Answer(s)