Question

I want to be able to detect when a user signs on to my application using passive acs, so that I can add them to my database if this is the first time using my app. Right now I am subscribing to WSFederationAuthenticationModule.SignedIn but I feel I’m missing something. Mainly I’m not sure the best place to subscribe to the event, I got it to work inside PostAuthenticateRequest but its a bit hacky. Any suggestions?

this code is from global.asax

    public override void Init()
    {

        base.Init();

        PostAuthenticateRequest += (s, e) =>
        {
            try
            {
                FederatedAuthentication.WSFederationAuthenticationModule.SignedIn -= SignedIn;
            }
            finally
            {
                FederatedAuthentication.WSFederationAuthenticationModule.SignedIn += SignedIn;
            }

        };


    }


    private void SignedIn(object sender, EventArgs e)
    {
       //do something
    }

EDIT:

For now I’m going to use a flag variable to make sure I only subscribe once to SignedIn. Unless someone has any other suggestions that is 🙂 thanks for the help Sandrino. Here is what I have at the moment.

    private static bool isFirstRequest = true;

    public override void Init()
    {


        base.Init();

        PostAuthenticateRequest += (s, e) => { 
        if (isFirstRequest)
        {
             FederatedAuthentication
                 .WSFederationAuthenticationModule.SignedIn += SignedIn;
             isFirstRequest = false;
        }

        };

    }


    private void SignedIn(object sender, EventArgs e)
    {

        //do something   

    }

EDIT:
A little more info. This problem happens if I’m using the azure emulator, it probably happens when deployed as well but I haven’t tried that. I have tested if I am just not able to debug by trying to write to a text file and no text file was created.

Answer 1

Why do you subscribe to the SignedIn event each time the PostAuthenticateRequest event is raised? You can simple subscribe to it when the application starts (in the Global.asax) and it will be raised for each user that signed in:

public class MvcApplication : System.Web.HttpApplication
{
    ...

    protected void Application_Start()
    {
        ...

        FederatedAuthentication.ServiceConfigurationCreated += (s, e) =>
        {
            FederatedAuthentication.WSFederationAuthenticationModule.SignedIn += new EventHandler(OnUserSignedIn);
        };
    }

    private void OnUserSignedIn(object sender, EventArgs e)
    {
        // Custom logic here.   
    }
}

The SignedIn event is the best way to detect a user sign in before the application continues. Take a look at the following diagram. Before redirecting back to a page, the SignedIn event is raised to allow you to detect an user sign in:

Reference: http://msdn.microsoft.com/en-us/library/ee517293.aspx