Build in SAML Authentication to Website

Opt in page (SAML built into with our Single Sign On provider) Built with C# authenticated with LDAP protocol Active Directory currently. We need it to authenticate with SAML and our SSO provider StudentNet (Cloudworx). See attached workflow for more information. And further details of an example of how our SSO provider works with another one of our services. • Workflow (Visio Format): Opt-In and Out Workflow • Example URL Example Login Link • Link to SSO Provider Site and Documentation: [login to view URL] Details of the page compilation currently: Logon page - Web component (page) that contains Logon and password text boxes in addition to a Button and label to display error messages. - When the button is clicked the LdapAuthentication object and it's methods are used to authenticate the user. Default page - Contains grid view and label controls on the page. The label control is for displaying any error messages from exceptions that would be raised in the page. The grid view control is used for displaying data from the join of a view SACS.VIEW_CONTACT_PORTAL_CHOICES and a table SACS.PORTAL_CHOICE. The join is on a column PORTAL_CHOICE_ID. - When the user changes the permissions a table SACS.PROCESS_PORTAL_CHOICE is written to with the choices made by the user. Global Application Class - for handling Web Application events - Contains the Application_AuthenticateRequest method that tries to authenticate the user based on the user's group by retrieving a cookie that was created previously. LdapAuthentication Class - customized class for authenticating the user against the LDAP/AD directory This class contains 4 methods - LdapAuthentication, IsAuthenticated, GetGroups and GetContactID. - First, upon instantiating an object of this class the LDAP path is set. That will be passed from the Logon page as a parameter. - Second, the IsAuthenticate method accepts 3 parameters - domain, user name (login ID) and password. Concatenates the domain and username. Creates a string AD entry and searches this user in the AD. Returns true if found otherwise returns false. - Third, the GetGroups method accepts 3 parameters - domain, user name (login ID) and password. Concatenates the domain and username. Creates a string AD entry and searches this user in the AD for its group. Returns the group to which this user belongs. - Fourth, the GetContactID method accepts 3 parameters - domain, user name (login ID) and password. Concatenates the domain and username. Creates a string AD entry and searches this user in the AD for its Contact ID. Returns the Contact ID from the "pager" field of this user's AD entry. Technical Details: The above 3 methods use similar logic as below. a. Initialize an instance of the DirectoryEntry class binding this instance to the node in Active Directory Domain Services located at the specified path. DirectoryEntry entry = new DirectoryEntry(_path, domainAndUsername, pwd); b. Now initialize an instance of the DirectorySearcher class using the specified path or search root. This will be the node in the Active Directory Domain Services hierarchy where the search starts. The SearchRoot property is initialized to this value. DirectorySearcher search = new DirectorySearcher(entry); c. Set the search filter string in LDAP format, such as "(objectClass=user)", which retrieves all objects. [login to view URL] = "(SAMAccountName=" + username + ")"; a. Gets a value indicating the list of properties to retrieve during the search. Retrieve specific property "cn", by adding it to this collection or list properties before we begin the search so as to retrieve it. [login to view URL]("cn");