在ADFS上使用Python进行身份验证

import requests
from onelogin.saml2.auth import OneLogin_Saml2_Auth

# ADFS配置信息
adfs_settings = {
    "strict": False,
    "debug": False,
    "sp": {
        "entityId": "https://your-python-app.com/metadata",
        "assertionConsumerService": {
            "url": "https://your-python-app.com/acs",
            "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST"
        },
        "singleLogoutService": {
            "url": "https://your-python-app.com/sls",
            "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
        },
        "NameIDFormat": "urn:oasis:names:tc:SAML:1.1:nameid-format:unspecified",
        "x509cert": "",
        "privateKey": ""
    },
    "idp": {
        "entityId": "https://your-adfs-server.com/adfs/services/trust",
        "singleSignOnService": {
            "url": "https://your-adfs-server.com/adfs/ls",
            "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
        },
        "singleLogoutService": {
            "url": "https://your-adfs-server.com/adfs/ls",
            "binding": "urn:oasis:names:tc:SAML:2.0:bindings:HTTP-Redirect"
        },
        "x509cert": ""
    }
}

# 创建SAML认证对象
auth = OneLogin_Saml2_Auth(request, adfs_settings)

# 处理身份验证请求
auth.process_response()

# 获取身份验证结果
if auth.is_authenticated():
    # 身份验证成功
    user_attributes = auth.get_attributes()
    username = user_attributes['username'][0]
    # 其他操作...
else:
    # 身份验证失败
    # 其他操作...