IIS Integration

JOSSO Agent for Internet Information Services

Overview

The JOSSO Agent for IIS provides native Single Sign-On integration for Microsoft Internet Information Services. It uses an HTTP module to intercept requests and validate user authentication against the JOSSO Identity Provider.

.NET HTTP Module

Windows Authentication

Claims-based identity

Requirements

Internet Information Services (IIS) 7.0 or higher
Windows Server 2012 or later
.NET Framework 4.5 or higher
JOSSO Agent for IIS

Installation

1. Install the Agent

Run the JOSSO Agent installer for IIS or copy the assemblies manually:

# Copy assemblies to GAC or bin folder
Josso.Agent.dll
Josso.Agent.IIS.dll

2. Register the HTTP Module

Add the module to your web.config:

<configuration>
  <system.webServer>
    <modules>
      <add name="JossoAuthModule"
           type="Josso.Agent.IIS.JossoAuthModule, Josso.Agent.IIS" />
    </modules>
  </system.webServer>
</configuration>

Configuration

Web.config Configuration

<configuration>
  <configSections>
    <section name="josso"
             type="Josso.Agent.Config.JossoConfigSection, Josso.Agent" />
  </configSections>

  <josso>
    <gateway endpoint="https://idp.example.com/josso" />
    <partnerApp id="my-iis-app" />
    <security mode="strong" />
    <session timeout="3600" />
  </josso>

  <system.web>
    <authentication mode="None" />
    <authorization>
      <deny users="?" />
    </authorization>
  </system.web>
</configuration>