Base solution for your next web application
Open Closed

SSO Login for ASP.NET Zero #6725


User avatar
0
kalidarscope created

We have the CPQ application and ASP.NET Zero application. We have to login from CPQ to ASP.NET zero application without password authentication.

Notes: In our CPQ application we have the option to login into CPQ with password authentication. They are maintaining some keys in their portal, we can use that to encrypt the username from our application. After we encrpt we could pass the username, domain and encrypted value in url. It will not ask any authentication to login. It will login into CPQ application without password authentication.

Same way it could possible to login into ASP.NET zero application without password authentication. Is it possible?


5 Answer(s)
  • User Avatar
    0
    maliming created
    Support Team

    Maybe you can look at ANZ's SSO code.

    https://github.com/aspnetzero/aspnet-zero-core/blob/dev/aspnet-core/src/MyCompanyName.AbpZeroTemplate.Web.Mvc/Controllers/AccountController.cs#L498 https://github.com/aspnetzero/aspnet-zero-core/blob/dev/aspnet-core/src/MyCompanyName.AbpZeroTemplate.Web.Public/Controllers/AccountController.cs#L37

  • User Avatar
    0
    kalidarscope created

    Is it possible to create a token from another application and login into the application with that token ? If possible, how can i create a token.

  • User Avatar
    0
    maliming created
    Support Team

    You can use the SignInToken property, just like ANZ

    https://github.com/aspnetzero/aspnet-zero-core/blob/48616521f7cfb2c5ca08490c3ed41f23a34d32ac/aspnet-core/src/MyCompanyName.AbpZeroTemplate.Core/Authorization/Users/User.cs#L20

  • User Avatar
    0
    kalidarscope created

    Is it possible to create my login credentials as external login provider in appsettings and use it for login? Because there is no option to login into application without password. You are using LoginAsync method to login. It is accepting the parameter like as username and password or external auth provider details.

  • User Avatar
    0
    ryancyq created
    Support Team

    Hi, if your CPQ application supports OpenId authentication, you can sign in ANZ application with CPQ application acts as the external authencation provider.

    For OpenId configuration, see https://docs.aspnetzero.com/documents/aspnet-core-angular/latest/Features-Angular-Token-Based-Authentication