Consuming Saml2.0 in MVC5 .net frame work 4.5 (Saml2.0 token is generated by F5 BigIp tool)
<p><strong>Current State of web application:</strong>
We have an existing web application designed in AngularJs, MVC5. Authentication is happening against our custom database.</p>

<p><strong><em>SignIn</em></strong>: 
We did over ride Microsoft.AspNet.Identity.UserManager and other source classes to talk to our database to get user related information.
adding the results to System.Security.Claims.ClaimsIdentity.</p>

<p>Passing on to "Microsoft.Owin.Security.IAuthenticationManager.SignIn(params System.Security.Claims.ClaimsIdentity[] identities)</p>

<p><strong>What I need SSO:</strong>
We would like to move the auhentication to SSO with SAML 2.0 token as we are planning to integrate 2 new vendors into our web application</p>

<p><strong>Identity Provider:</strong>
We are implementing Identity provider in F5 Big Ip which does the authentication by providing the login page and generates the saml2 token. Our web application would be configured as Service provider. On redirect to the web application it will pass on the saml2.0 token.</p>

<p><strong>Consuming SAML2.0 in MVC .net framework 4.5.2</strong>
All my application would need is to consume saml2.0 token and integrate with existing authentication pipeline. 
<strong><em>Things to do:</em></strong>
Meta data from Identity provider has public key to decrypt saml2.0 token and as well a key which is used to sign the meta data file</p>

<p>My assumption would be parse the request for SAML 2.0 token and verify if the token is valid and use the data from the attributes and query the database for more details and insert the results into "System.Security.Claims.ClaimsIdentity" and use the existing signin operation.
Need to figure out how to configure the principle.. and do we still need  Microsoft.AspNet.Identity.UserManager.</p>

<p><strong>Research:</strong>
In visual studio we had identity and access tool which doesnt exist from vs2013.
Went through the article on windows identity foundation and claims identity principle
www.codeproject.com/Articles/504399/Understanding-Windows-Identity-Foundation-WIF</p>

<p>I know wif support saml2.0 token but not saml2 protocols.</p>

<p>Here are the third party tools that was suggested to be used
<a href="http://nzpcmad.blogspot.co.nz/2013/06/saml-saml-connectivity-toolkit.html" rel="nofollow">http://nzpcmad.blogspot.co.nz/2013/06/saml-saml-connectivity-toolkit.html</a></p>

<p>I am not sure just to consume do I need to used one of the tool? As we have our IDP configured in F5 bigip and not designed in .net</p>

<p>Another good article I found
<a href="http://www.primaryobjects.com/2013/08/08/using-single-sign-on-with-windows-identity-foundation-in-mvc-net/" rel="nofollow">http://www.primaryobjects.com/2013/08/08/using-single-sign-on-with-windows-identity-foundation-in-mvc-net/</a></p>

<p>Also saw some suggestions about Saml2SecurityTokenHandler to process saml2.0 token.</p>

<p>I appreciate if someone can direct me to simpler solution to integrate to my existing web app. Just need to consume saml2.0 token and integrate with existing claims based authentication.</p>