0

I am having an issue trying to add in a custom provider into IdentityServer3 for ADFS 3.0 and was hoping someone could possibly point me in the right direction.

I have used the following references:

And I receive an error on the return page after coming from the IDP, returning the AuthenticationTicket.

Error

There is an error determining which application you are signing into. Return to the application and try again.

protected override async Task<AuthenticationTicket> AuthenticateCoreAsync()
{
    //calls token and gets the values correctly
    //context.Properties does contain a signinid

    return new AuthenticationTicket(context.Identity, context.Properties);
}

The context.Properties does have a key/value pair for signinid.

And I do have all my claim data. Using this answer here

Here is the log:

18-09-13 07:44:59.412 -05:00 [Information] External login requested for provider: "https://idp.domain.com/adfs" 2018-09-13 07:44:59.417 -05:00 [Debug] Cache hit: 2 2018-09-13 07:44:59.419 -05:00 [Information] Triggering challenge for external identity provider 2018-09-13 07:45:25.389 -05:00 [Information] Callback invoked from external identity provider 2018-09-13 07:45:25.395 -05:00 [Information] No signin id passed

I am currently using:

https://localhost:xxxxx/identity/callback
/identity/callback

as my RedirectUri and CallbackPath, maybe these are incorrect? I have tried some others but received 404s.

I am just not sure what I am missing or what I am doing incorrectly, any help would be appreciated. I did do a search and found a few others had similar problems with WSFed or OpenID but there was no solutions that helped me.

Thank you.

jj Sore
  • 11
  • 4
  • It looks like it is fairly similar to this ticket (but no solution) except its IS3: https://stackoverflow.com/questions/46149131/no-signin-id-passed-during-redirect-from-custom-middleware-external-identity-pr?rq=1 – jj Sore Sep 13 '18 at 15:37

1 Answers1

1

After stepping through this issue (and ID Server code) I found the problem. I was receiving the no signin id error because the AuthenicateAsync("idsrv.external") call was failing inside IdentityServer3.

It was a result of the return url and callback path i used. Instead of calling /identity/callback directly I got this working by using /identity/signin-adfs and a callback path of /signin-adfs based on how the match in the custom providers given as examples were done.

jj Sore
  • 11
  • 4