Aplifi SSO SAML Implementation

I host several websites for insurance companies. We have a need for a Single Sign On tool between our websites and the Aplifi system. The SSO needs to be through SAML. Here are some of the project details: This project is in ASP.net 3.5 / VB. The system will allow authenticated users to select a link on the insurance agency's website. This link will bring users to a page on the agency's website that will start the SSO process. The user data will be pulled from an object and passed to the Aplifi system through the SAML packet. Sample code for creating the member object and getting the data: Dim objMember as New Member [login to view URL]([login to view URL]) Dim strFirstName as string strFirstName = [login to view URL] Aplifi system is expecting SAML and can support version 1.1 and 1.2. We have access to a license from <[login to view URL]> for their SAML tools. SAML 1.1. ? After Aplifi link is clicked on the agency site, whatever is in the SAML will be passed over to Aplifi through the gateway. ? We use 509 Certificates and SSL for security. ? Will need to work through portal work for communications. I have included sample SAML code for you to review. ? For the Affirm-for-Life order entry system, the SSO will pass over the needed information. ? There are currently two options available in regards to where the agent lands after clicking the link to access the Aplifi system. Levinson will pass parameters (i.e. User ID, User Action, User Role see sample XML for more details) that will inform Aplifi of where the agent is to land upon accessing the Aplifi system. ? There is also the option of providing two links on the agency page that would allow the agent to either go to the quote screen or the dashboard. ## Deliverables I have attached several files first one is the sample SAML for Viewdashbaord, second sample for create a new order, third file contains the sample SSO_DATA (what I mentioned as ACORD TXLife message). You need to keep same saml attribute name (it also case sensitive) : UserId, SSO_DATA, UserRole, UserAction 1. UserId: you can your agents username or any username 2. UserAction: it should be either "VIEWDASHBOARD" or "Life Product Illustration" 3. UserRole: BBA_AGENT (I will provide other user role like BBA_AGENTMANAGER etc) 4. SSO_DATA: add TXlife message. You can use saml:Audience=[login to view URL], Issuer=your domain. For digital signature please follow same algorithm (I believe componentspace use same algorithm) I will provide you encrypted token and corresponding encryption algorithm. If you use componentsapce then we can use all supported algorithm and padding. Please let me know if you have any question or need any other information.