Knowit.NemLogin 0.1.0

Knowit.NemLogin

Core SAML 2.0 / OIOSAML 3 + 4 service-provider primitives for integrating Danish NemLog-in 3 (MitID) in .NET applications.

Framework-agnostic — pair with Knowit.NemLogin.Web for ASP.NET Core, or use the core services directly from any host that needs to build, validate, sign, or decrypt OIOSAML messages.

Package family

What's in this package

• INemLoginService — single entry point for SP-initiated AuthnRequests, AuthnResponse processing (signature + decryption + 15-step validation), LogoutRequest/Response handling, and SP metadata generation.
• NemLoginOptions — POCO configuration: environment, OIOSAML version, attribute profiles, certs, IdP metadata URL, clock skew, replay-cache policy, event hooks.
• IOioSamlProfile — per-version protocol behavior for OIOSAML 3.0.3 and OIOSAML 4.0.0.
• NemLoginEvents — framework-agnostic pipeline hooks (OnCreatingAuthnRequest, OnAssertionValidated, OnAuthnResponseReceived, OnGeneratingMetadata, OnCreatingLogoutRequest, OnRemoteSignOut, OnAuthenticationFailed).
• ICertificateProvider — pluggable cert resolution (file / store / Key Vault via the companion package).
• IAssertionReplayCache — pluggable replay protection (in-memory default, Redis or equivalent for multi-node).
• Strongly-typed NemLoginAttributes for canonical attribute extraction across OIOSAML 3 and 4 (person, professional, NSIS LoA/IAL/AAL, v4-only CPR-IAL / isRobot / allowQualifiedSigning).

Quick start

builder.Services.Configure<NemLoginOptions>(o =>
{
    o.Environment = NemLoginEnvironment.PreProduction;
    o.OioSamlVersion = OioSamlVersion.V3;
    o.AllowedProfiles = AttributeProfile.DkPerson;
    o.EntityId = "https://myapp.example.dk/saml";
    o.AssertionConsumerServiceUrl = new Uri("https://myapp.example.dk/nemlogin/callback");
    o.IdentityProviderMetadataUrl = new Uri("https://www.nemlog-in.dk/files/oiosaml3-idp-preprod-inttest.xml");
    o.SigningCertificates.Add(CertificateReference.FromFile("sp.pfx", "<password>"));
});

// For ASP.NET Core hosts, install Knowit.NemLogin.Web and call
// `.AddNemLogin()` on the AuthenticationBuilder — it registers the core
// services automatically.

Repository

github.com/mustap/Knowit-NemLogin — full documentation, ARCHITECTURE.md, getting-started, hooks-cookbook, production-checklist, operational-runbook, and migration guides for Sustainsys.Saml2, ITfoxtec.Identity.Saml2 direct, and digst/OIOSAML.Net.

License

MIT — see LICENSE.