User1743392732 posted
I'm working with ASP.NET MVC application session, trying to implement ADFS authentication with OWIN using "UseCookieAuthentication" and "UseWsFederationAuthentication".
The ADFS authentication only works when I set authentication mode="None" in the web.config
The problem is that when I set authentication mode="None" and, for example, session timeout = 2 minutes, the session ends at 2 minutes after the login. Sliding expiration is not working and the user gets logged out even while using the site.
When I set authentication mode="Forms" the session behavies perfectlly and the user gets logged out only if 2 minutes passed after the last request, but the ADFS authentication stops working.
Does someone knows something about this problem?
I need slidingExpiration to work with authentication mode="None"...
Code:
app.SetDefaultSignInAsAuthenticationType(DefaultAuthenticationTypes.ApplicationCookie);
app.UseCookieAuthentication(new CookieAuthenticationOptions {
CookieManager = new SystemWebCookieManager(),
SlidingExpiration = true,
ExpireTimeSpan = TimeSpan.FromMinutes((double)sessionTimeout),
AuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
CookieName = CookieAuthenticationDefaults.CookiePrefix + DefaultAuthenticationTypes.ApplicationCookie,
});
app.UseWsFederationAuthentication(new WsFederationAuthenticationOptions
{
Wtrealm = realm,
MetadataAddress = adfsMetadata,
Wreply = replay,
AuthenticationMode = Microsoft.Owin.Security.AuthenticationMode.Passive,
SignInAsAuthenticationType = DefaultAuthenticationTypes.ApplicationCookie,
UseTokenLifetime = false
}
And web.config:
<sessionState timeout="2" cookieName="MB_SEID"></sessionState>
<authentication mode="None">
<forms loginUrl="~/Home/Index" defaultUrl="/" path="/" name="UID" timeout="2" protection="All" slidingExpiration="true" enableCrossAppRedirects="true" />
</authentication>
