SSO and IdentityServer with services that expect SAML and JWT

Question

I'm using IdentityServer4 with OpenID Connect and OAuth2.

I need to enable SSO with some legacy services that support SAML.

Can someone explain (or point me to a good article) explaining how this could be achieved?

Would I need to request a SAML token from IdentityServer for my JWT token that I can pass to the legacy service? Or could I embed the SAML token into the JWT ID token which can then be extracted and passed to the legacy service?

Answer 1

You need a SAML2P plugin for IdentityServer4, there's an experimental version at https://leastprivilege.com/2017/10/13/saml2p-identity-provider-support-for-identityserver4/