Feature/openid (#7420)

src/Orchard.Specs/App.Config

@@ -27,6 +27,10 @@
         <assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
         <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
       </dependentAssembly>
+      <dependentAssembly>
+        <assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+        <bindingRedirect oldVersion="0.0.0.0-3.0.1.0" newVersion="3.0.1.0" />
+      </dependentAssembly>
     </assemblyBinding>
   </runtime>
 </configuration>

src/Orchard.Web/Modules/Orchard.OpenId/Constants/ActiveDirectoryFederationServices.cs

@@ -0,0 +1,7 @@
+namespace Orchard.OpenId.Constants {
+    public class ActiveDirectoryFederationServices {
+        public const string DefaultClientId = "xXxXxXxX-xXxX-xXxX-xXxX-xXxXxXxXxXxX";
+        public const string DefaultMetadataAddress = "https://your-adfs-domain/adfs/.well-known/openid-configuration";
+        public const string DefaultPostLogoutRedirectUri = "https://your-website/";
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Constants/AzureActiveDirectory.cs

@@ -0,0 +1,5 @@
+namespace Orchard.OpenId.Constants {
+    public class AzureActiveDirectory {
+        public const string ObjectIdentifierKey = "http://schemas.microsoft.com/identity/claims/objectidentifier";
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Constants/Facebook.cs

@@ -0,0 +1,6 @@
+namespace Orchard.OpenId.Constants {
+    public class Facebook {
+        public const string DefaultAppId = "0000000000000000";
+        public const string DefaultAppSecret = "xXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxX";
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Constants/General.cs

@@ -0,0 +1,9 @@
+namespace Orchard.OpenId.Constants {
+    public class General {
+        public const string AuthenticationErrorUrl = "~/Authentication/Error";
+        public const string LogonCallbackUrl = "~/Users/Account/LogonCallback";
+        public const string OpenIdOwinMiddlewarePriority = "10";
+        public const string LocalIssuer = "LOCAL AUTHORITY";
+        public const string FormsIssuer = "Forms";
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Constants/Google.cs

@@ -0,0 +1,6 @@
+namespace Orchard.OpenId.Constants {
+    public class Google {
+        public const string DefaultClientId = "000-000.apps.googleusercontent.com";
+        public const string DefaultClientSecret = "x-xXxXxXxXxXxXxXxXxXxXxX";
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Constants/Twitter.cs

@@ -0,0 +1,14 @@
+namespace Orchard.OpenId.Constants {
+    public class Twitter {
+        public const string DefaultConsumerKey = "xXxXxXxXxXxXxXxXxXxXxXxXx";
+        public const string DefaultConsumerSecret = "xXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxXxX";
+
+        // Certificate Subject Key Identifier
+        public const string DefaultVeriSignClass3SecureServerCA_G2 = "A5EF0B11CEC04103A34A659048B21CE0572D7D47";
+        public const string DefaultVeriSignClass3SecureServerCA_G3 = "0D445C165344C1827E1D20AB25F40163D8BE79A5";
+        public const string DefaultVeriSignClass3PublicPrimaryCA_G5 = "7FD365A7C2DDECBBF03009F34339FA02AF333133";
+        public const string DefaultSymantecClass3SecureServerCA_G4 = "39A55D933676616E73A761DFA16A7E59CDE66FAD";
+        public const string DefaultDigiCertSHA2HighAssuranceServerCA = "5168FF90AF0207753CCCD9656462A212B859723B";
+        public const string DefaultDigiCertHighAssuranceEVRootCA = "B13EC36903F8BF4701D498261A0802EF63642BC3";
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Controllers/AccountController.cs

@@ -0,0 +1,162 @@
+using System;
+using System.Collections.Generic;
+using System.Diagnostics.CodeAnalysis;
+using System.Web;
+using System.Web.Mvc;
+using Microsoft.Owin.Security;
+using Microsoft.Owin.Security.Cookies;
+using Microsoft.Owin.Security.OpenIdConnect;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.Logging;
+using Orchard.Mvc.Extensions;
+using Orchard.OpenId.Services;
+using Orchard.Security;
+using Orchard.Themes;
+using Orchard.Users.Events;
+
+namespace Orchard.OpenId.Controllers
+{
+    [Themed]
+    [OrchardFeature("Orchard.OpenId")]
+    public class AccountController : Controller {
+        private readonly IEnumerable<IOpenIdProvider> _openIdProviders;
+        private readonly IAuthenticationService _authenticationService;
+        private readonly IMembershipService _membershipService;
+        private readonly IOrchardServices _orchardServices;
+        private readonly IUserEventHandler _userEventHandler;
+
+        public AccountController(
+            IEnumerable<IOpenIdProvider> openIdProviders,
+            IAuthenticationService authenticationService,
+            IMembershipService membershipService,
+            IOrchardServices orchardServices,
+            IUserEventHandler userEventHandler) {
+
+            _openIdProviders = openIdProviders;
+            _authenticationService = authenticationService;
+            _membershipService = membershipService;
+            _orchardServices = orchardServices;
+            _userEventHandler = userEventHandler;
+
+            Logger = NullLogger.Instance;
+            T = NullLocalizer.Instance;
+        }
+
+        public ILogger Logger { get; set; }
+        public Localizer T { get; set; }
+
+        [HttpGet]
+        public ActionResult LogOn() {
+            if (Request.IsAuthenticated) {
+                return Redirect(Url.Content("~/"));
+            }
+
+            return View(_openIdProviders);
+        }
+
+        [HttpPost]
+        [AlwaysAccessible]
+        [ValidateInput(false)]
+        [SuppressMessage("Microsoft.Design", "CA1054:UriParametersShouldNotBeStrings", Justification = "Needs to take same parameter type as Controller.Redirect()")]
+        public ActionResult LogOn(string userNameOrEmail, string password, string returnUrl, bool rememberMe = false) {
+            _userEventHandler.LoggingIn(userNameOrEmail, password);
+
+            var user = ValidateLogOn(userNameOrEmail, password);
+            if (!ModelState.IsValid) {
+                return View(_openIdProviders);
+            }
+
+            var membershipSettings = _membershipService.GetSettings();
+            if (user != null &&
+                membershipSettings.EnableCustomPasswordPolicy &&
+                membershipSettings.EnablePasswordExpiration &&
+                _membershipService.PasswordIsExpired(user, membershipSettings.PasswordExpirationTimeInDays)) {
+                return RedirectToAction("ChangeExpiredPassword", new { username = user.UserName });
+            }
+
+            _authenticationService.SignIn(user, rememberMe);
+            _userEventHandler.LoggedIn(user);
+
+            return this.RedirectLocal(returnUrl);
+        }
+
+        public void Challenge(string openIdProvider) {
+            _userEventHandler.LoggingIn(openIdProvider, String.Empty);
+
+            if (String.IsNullOrWhiteSpace(openIdProvider))
+                openIdProvider = OpenIdConnectAuthenticationDefaults.AuthenticationType;
+
+            if (Request.IsAuthenticated) {
+                Redirect(Url.Content("~/"));
+                return;
+            }
+
+            var redirectUri = Url.Content(String.Concat(Constants.General.LogonCallbackUrl));
+
+            HttpContext.GetOwinContext().Authentication.Challenge(new AuthenticationProperties { RedirectUri = redirectUri }, openIdProvider);
+        }
+
+        public RedirectResult LogOff(string openIdProvider) {
+            if (String.IsNullOrWhiteSpace(openIdProvider))
+                openIdProvider = OpenIdConnectAuthenticationDefaults.AuthenticationType;
+
+            HttpContext.GetOwinContext().Authentication.SignOut(openIdProvider, CookieAuthenticationDefaults.AuthenticationType);
+            _authenticationService.SignOut();
+
+            var loggedUser = _authenticationService.GetAuthenticatedUser();
+            if (loggedUser != null) {
+                _userEventHandler.LoggedOut(loggedUser);
+            }
+
+            return Redirect(Url.Content("~/"));
+        }
+
+        public RedirectResult LogonCallback() {
+            var user = _authenticationService.GetAuthenticatedUser();
+            _userEventHandler.LoggedIn(user);
+
+            return Redirect(Url.Content("~/"));
+        }
+
+        public ActionResult AccessDenied() {
+            var returnUrl = Request.QueryString["ReturnUrl"];
+            var currentUser = _authenticationService.GetAuthenticatedUser();
+
+            if (currentUser == null) {
+                return RedirectToAction("Logon");
+            }
+
+            _userEventHandler.AccessDenied(currentUser);
+
+            return View();
+        }
+
+        public ActionResult Error() {
+            return View();
+        }
+
+        private IUser ValidateLogOn(string userNameOrEmail, string password) {
+            bool validate = true;
+
+            if (String.IsNullOrEmpty(userNameOrEmail)) {
+                ModelState.AddModelError("userNameOrEmail", T("You must specify a username or e-mail."));
+                validate = false;
+            }
+            if (String.IsNullOrEmpty(password)) {
+                ModelState.AddModelError("password", T("You must specify a password."));
+                validate = false;
+            }
+
+            if (!validate)
+                return null;
+
+            var user = _membershipService.ValidateUser(userNameOrEmail, password);
+            if (user == null) {
+                ModelState.AddModelError("password", T("The username or e-mail or password provided is incorrect."));
+            }
+
+            return user;
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Handlers/ActiveDirectoryFederationServicesSettingsPartHandler.cs

@@ -0,0 +1,17 @@
+using Orchard.ContentManagement.Handlers;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+
+namespace Orchard.OpenId.Handlers {
+    [OrchardFeature("Orchard.OpenId.ActiveDirectoryFederationServices")]
+    public class ActiveDirectoryFederationServicesSettingsPartHandler : ContentHandler {
+        public Localizer T { get; set; }
+
+        public ActiveDirectoryFederationServicesSettingsPartHandler() {
+            T = NullLocalizer.Instance;
+            Filters.Add(new ActivatingFilter<ActiveDirectoryFederationServicesSettingsPart>("Site"));
+            Filters.Add(new TemplateFilterForPart<ActiveDirectoryFederationServicesSettingsPart>("ActiveDirectoryFederationServicesSettings", "Parts.ActiveDirectoryFederationServicesSettings", "OpenId"));
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Handlers/AzureActiveDirectorySettingsPartHandler.cs

@@ -0,0 +1,18 @@
+using Orchard.OpenId.Models;
+using Orchard.ContentManagement;
+using Orchard.ContentManagement.Handlers;
+using Orchard.Localization;
+using Orchard.Environment.Extensions;
+
+namespace Orchard.OpenId.Handlers {
+    [OrchardFeature("Orchard.OpenId.AzureActiveDirectory")]
+    public class AzureActiveDirectorySettingsPartHandler : ContentHandler {
+        public Localizer T { get; set; }
+
+        public AzureActiveDirectorySettingsPartHandler() {
+            T = NullLocalizer.Instance;
+            Filters.Add(new ActivatingFilter<AzureActiveDirectorySettingsPart>("Site"));
+            Filters.Add(new TemplateFilterForPart<AzureActiveDirectorySettingsPart>("AzureActiveDirectorySettings", "Parts.AzureActiveDirectorySettings", "OpenId"));
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Handlers/FacebookSettingsPartHandler.cs

@@ -0,0 +1,17 @@
+using Orchard.ContentManagement.Handlers;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+
+namespace Orchard.OpenId.Handlers {
+    [OrchardFeature("Orchard.OpenId.Facebook")]
+    public class FacebookSettingsPartHandler : ContentHandler {
+        public Localizer T { get; set; }
+
+        public FacebookSettingsPartHandler() {
+            T = NullLocalizer.Instance;
+            Filters.Add(new ActivatingFilter<FacebookSettingsPart>("Site"));
+            Filters.Add(new TemplateFilterForPart<FacebookSettingsPart>("FacebookSettings", "Parts.FacebookSettings", "OpenId"));
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Handlers/GoogleSettingsPartHandler.cs

@@ -0,0 +1,17 @@
+using Orchard.ContentManagement.Handlers;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+
+namespace Orchard.OpenId.Handlers {
+    [OrchardFeature("Orchard.OpenId.Google")]
+    public class GoogleSettingsPartHandler : ContentHandler {
+        public Localizer T { get; set; }
+
+        public GoogleSettingsPartHandler() {
+            T = NullLocalizer.Instance;
+            Filters.Add(new ActivatingFilter<GoogleSettingsPart>("Site"));
+            Filters.Add(new TemplateFilterForPart<GoogleSettingsPart>("GoogleSettings", "Parts.GoogleSettings", "OpenId"));
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Handlers/OpenIdSettingsPartHandler.cs

@@ -0,0 +1,20 @@
+using Orchard.ContentManagement;
+using Orchard.ContentManagement.Handlers;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+
+namespace Orchard.OpenId.Handlers {
+    [OrchardFeature("Orchard.OpenId")]
+    public class OpenIdSettingsPartHandler : ContentHandler {
+        public Localizer T { get; set; }
+
+        protected override void GetItemMetadata(GetContentItemMetadataContext context) {
+            if (context.ContentItem.ContentType != "Site") {
+                return;
+            }
+
+            base.GetItemMetadata(context);
+            context.Metadata.EditorGroupInfo.Add(new GroupInfo(T("Open Id")) { Id = "OpenId" });
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Handlers/TwitterSettingsPartHandler.cs

@@ -0,0 +1,17 @@
+using Orchard.ContentManagement.Handlers;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+
+namespace Orchard.OpenId.Handlers {
+    [OrchardFeature("Orchard.OpenId.Twitter")]
+    public class TwitterSettingsPartHandler : ContentHandler {
+        public Localizer T { get; set; }
+
+        public TwitterSettingsPartHandler() {
+            T = NullLocalizer.Instance;
+            Filters.Add(new ActivatingFilter<TwitterSettingsPart>("Site"));
+            Filters.Add(new TemplateFilterForPart<TwitterSettingsPart>("TwitterSettings", "Parts.TwitterSettings", "OpenId"));
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Models/ActiveDirectoryFederationServicesSettingsPart.cs

@@ -0,0 +1,39 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+
+namespace Orchard.OpenId.Models {
+    [OrchardFeature("Orchard.OpenId.ActiveDirectoryFederationServices")]
+    public class ActiveDirectoryFederationServicesSettingsPart : ContentPart {
+
+        public string ClientId {
+            get { return this.Retrieve(x => x.ClientId, () => Constants.ActiveDirectoryFederationServices.DefaultClientId); }
+            set { this.Store(x => x.ClientId, value); }
+        }
+
+        public string MetadataAddress {
+            get { return this.Retrieve(x => x.MetadataAddress, () => Constants.ActiveDirectoryFederationServices.DefaultMetadataAddress); }
+            set { this.Store(x => x.MetadataAddress, value); }
+        }
+
+        public string PostLogoutRedirectUri {
+            get { return this.Retrieve(x => x.PostLogoutRedirectUri); }
+            set { this.Store(x => x.PostLogoutRedirectUri, value); }
+        }
+
+        public bool IsValid {
+            get {
+                if (String.IsNullOrWhiteSpace(ClientId) ||
+                    String.CompareOrdinal(ClientId, Constants.ActiveDirectoryFederationServices.DefaultClientId) == 0 ||
+                    String.IsNullOrWhiteSpace(MetadataAddress) ||
+                    String.CompareOrdinal(MetadataAddress, Constants.ActiveDirectoryFederationServices.DefaultMetadataAddress) == 0 ||
+                    String.IsNullOrWhiteSpace(PostLogoutRedirectUri)) {
+
+                    return false;
+                }
+
+                return true;
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Models/AzureActiveDirectorySettingsPart.cs

@@ -0,0 +1,109 @@
+using System;
+using System.Collections.Generic;
+using System.Linq;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using SysEnvironment = System.Environment;
+
+namespace Orchard.OpenId.Models {
+    [OrchardFeature("Orchard.OpenId.AzureActiveDirectory")]
+    public class AzureActiveDirectorySettingsPart : ContentPart {
+        private const char ServiceResourceIdsSeprator = '=';
+        private const string ServiceResourceIdDefaultKey = "default";
+
+        public string Tenant {
+            get { return this.Retrieve(x => x.Tenant); }
+            set { this.Store(x => x.Tenant, value); }
+        }
+
+        public string ADInstance {
+            get { return this.Retrieve(x => x.ADInstance, () => "https://login.microsoftonline.com/{0}"); }
+            set { this.Store(x => x.ADInstance, value); }
+        }
+
+        public string ClientId {
+            get { return this.Retrieve(x => x.ClientId); }
+            set { this.Store(x => x.ClientId, value); }
+        }
+
+        public string AppName {
+            get { return this.Retrieve(x => x.AppName); }
+            set { this.Store(x => x.AppName, value); }
+        }
+
+        public string LogoutRedirectUri {
+            get { return this.Retrieve(x => x.LogoutRedirectUri); }
+            set { this.Store(x => x.LogoutRedirectUri, value); }
+        }
+
+        public bool BearerAuthEnabled {
+            get { return this.Retrieve(x => x.BearerAuthEnabled); }
+            set { this.Store(x => x.BearerAuthEnabled, value); }
+        }
+
+        public bool SSLEnabled {
+            get { return this.Retrieve(x => x.SSLEnabled); }
+            set { this.Store(x => x.SSLEnabled, value); }
+        }
+
+        public bool AzureWebSiteProtectionEnabled {
+            get { return this.Retrieve(x => x.AzureWebSiteProtectionEnabled); }
+            set { this.Store(x => x.AzureWebSiteProtectionEnabled, value); }
+        }
+
+        public string GraphApiUrl {
+            get { return this.Retrieve(x => x.GraphApiUrl, () => "https://graph.windows.net"); }
+            set { this.Store(x => x.GraphApiUrl, value); }
+        }
+
+        public bool UseAzureGraphApi {
+            get { return this.Retrieve(x => x.UseAzureGraphApi); }
+            set { this.Store(x => x.UseAzureGraphApi, value); }
+        }
+
+        public string ServiceResourceID {
+            get { return this.Retrieve(x => x.ServiceResourceID); }
+            set { this.Store(x => x.ServiceResourceID, value); }
+        }
+
+        public string AppKey {
+            get { return this.Retrieve(x => x.AppKey); }
+            set { this.Store(x => x.AppKey, value); }
+        }
+
+        public bool IsValid {
+            get {
+                if (String.IsNullOrWhiteSpace(Tenant) ||
+                    String.IsNullOrWhiteSpace(ClientId) ||
+                    String.IsNullOrWhiteSpace(LogoutRedirectUri) ||
+                    String.IsNullOrWhiteSpace(ServiceResourceID) ||
+                    String.IsNullOrWhiteSpace(AppKey)) {
+
+                    return false;
+                }
+
+                return true;
+            }
+        }
+
+        public Dictionary<string, string> ServiceResourceIDs {
+            get {
+                return this
+                    .Retrieve(x => x.ServiceResourceID)
+                    .Split(SysEnvironment.NewLine.ToCharArray(), StringSplitOptions.RemoveEmptyEntries)
+                    .ToDictionary(
+                        resourceId => {
+                            return resourceId.Contains(ServiceResourceIdsSeprator) ?
+                                        resourceId.Split(ServiceResourceIdsSeprator)[0] :
+                                        ServiceResourceIdDefaultKey;
+                        },
+                        resourceId => {
+                            return resourceId.Contains(ServiceResourceIdsSeprator) ?
+                                        resourceId.Split(ServiceResourceIdsSeprator)[1] :
+                                        resourceId;
+                        }
+                    );
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Models/FacebookSettingsPart.cs

@@ -0,0 +1,33 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+
+namespace Orchard.OpenId.Models {
+    [OrchardFeature("Orchard.OpenId.Facebook")]
+    public class FacebookSettingsPart : ContentPart {
+
+        public string AppId {
+            get { return this.Retrieve(x => x.AppId); }
+            set { this.Store(x => x.AppId, value); }
+        }
+
+        public string AppSecret {
+            get { return this.Retrieve(x => x.AppSecret); }
+            set { this.Store(x => x.AppSecret, value); }
+        }
+
+        public bool IsValid {
+            get {
+                if (String.IsNullOrWhiteSpace(AppId) ||
+                    String.CompareOrdinal(AppId, Constants.Facebook.DefaultAppId) == 0 ||
+                    String.IsNullOrWhiteSpace(AppSecret) ||
+                    String.CompareOrdinal(AppSecret, Constants.Facebook.DefaultAppSecret) == 0) {
+
+                    return false;
+                }
+
+                return true;
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Models/GoogleSettingsPart.cs

@@ -0,0 +1,39 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+
+namespace Orchard.OpenId.Models {
+    [OrchardFeature("Orchard.OpenId.Google")]
+    public class GoogleSettingsPart : ContentPart {
+
+        public string ClientId {
+            get { return this.Retrieve(x => x.ClientId, () => Constants.Google.DefaultClientId); }
+            set { this.Store(x => x.ClientId, value); }
+        }
+
+        public string ClientSecret {
+            get { return this.Retrieve(x => x.ClientSecret, () => Constants.Google.DefaultClientSecret); }
+            set { this.Store(x => x.ClientSecret, value); }
+        }
+
+        public string CallbackPath {
+            get { return this.Retrieve(x => x.CallbackPath, () => Constants.General.LogonCallbackUrl); }
+            set { this.Store(x => x.CallbackPath, value); }
+        }
+
+        public bool IsValid {
+            get {
+                if (String.IsNullOrWhiteSpace(ClientId) ||
+                    String.CompareOrdinal(ClientId, Constants.Google.DefaultClientId) == 0 ||
+                    String.IsNullOrWhiteSpace(ClientSecret) ||
+                    String.CompareOrdinal(ClientId, Constants.Google.DefaultClientSecret) == 0 ||
+                    String.IsNullOrWhiteSpace(CallbackPath)) {
+
+                    return false;
+                }
+
+                return true;
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Models/TwitterSettingsPart.cs

@@ -0,0 +1,69 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+
+namespace Orchard.OpenId.Models {
+    [OrchardFeature("Orchard.OpenId.Twitter")]
+    public class TwitterSettingsPart : ContentPart {
+
+        public string ConsumerKey {
+            get { return this.Retrieve(x => x.ConsumerKey, () => Constants.Twitter.DefaultConsumerKey); }
+            set { this.Store(x => x.ConsumerKey, value); }
+        }
+
+        public string ConsumerSecret {
+            get { return this.Retrieve(x => x.ConsumerSecret, () => Constants.Twitter.DefaultConsumerSecret); }
+            set { this.Store(x => x.ConsumerSecret, value); }
+        }
+
+        public bool IsValid {
+            get {
+                if (String.IsNullOrWhiteSpace(ConsumerKey) ||
+                    String.CompareOrdinal(ConsumerKey, Constants.Twitter.DefaultConsumerKey) == 0 ||
+                    String.IsNullOrWhiteSpace(ConsumerSecret) ||
+                    String.CompareOrdinal(ConsumerSecret, Constants.Twitter.DefaultConsumerSecret) == 0) {
+
+                    return false;
+                }
+
+                return true;
+            }
+        }
+
+        public string VeriSignClass3SecureServerCA_G2
+        {
+            get { return this.Retrieve(x => x.VeriSignClass3SecureServerCA_G2, () => Constants.Twitter.DefaultVeriSignClass3SecureServerCA_G2); }
+            set { this.Store(x => x.VeriSignClass3SecureServerCA_G2, value); }
+        }
+
+        public string VeriSignClass3SecureServerCA_G3
+        {
+            get { return this.Retrieve(x => x.VeriSignClass3SecureServerCA_G3, () => Constants.Twitter.DefaultVeriSignClass3SecureServerCA_G3); }
+            set { this.Store(x => x.VeriSignClass3SecureServerCA_G3, value); }
+        }
+
+        public string VeriSignClass3PublicPrimaryCA_G5
+        {
+            get { return this.Retrieve(x => x.VeriSignClass3PublicPrimaryCA_G5, () => Constants.Twitter.DefaultVeriSignClass3PublicPrimaryCA_G5); }
+            set { this.Store(x => x.VeriSignClass3PublicPrimaryCA_G5, value); }
+        }
+
+        public string SymantecClass3SecureServerCA_G4
+        {
+            get { return this.Retrieve(x => x.SymantecClass3SecureServerCA_G4, () => Constants.Twitter.DefaultSymantecClass3SecureServerCA_G4); }
+            set { this.Store(x => x.SymantecClass3SecureServerCA_G4, value); }
+        }
+
+        public string DigiCertSHA2HighAssuranceServerCA
+        {
+            get { return this.Retrieve(x => x.DigiCertSHA2HighAssuranceServerCA, () => Constants.Twitter.DefaultDigiCertSHA2HighAssuranceServerCA); }
+            set { this.Store(x => x.DigiCertSHA2HighAssuranceServerCA, value); }
+        }
+
+        public string DigiCertHighAssuranceEVRootCA
+        {
+            get { return this.Retrieve(x => x.DigiCertHighAssuranceEVRootCA, () => Constants.Twitter.DefaultDigiCertHighAssuranceEVRootCA); }
+            set { this.Store(x => x.DigiCertHighAssuranceEVRootCA, value); }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Module.txt

@@ -0,0 +1,38 @@
+Name: OpenId Connect
+AntiForgery: enabled
+Author: Tha'er Al-Ajlouni, Avertra Corp. (http://www.avertra.com)
+Website: http://orchardproject.net
+Version: 1.0
+OrchardVersion: 1.10.1
+Description: Enables Orchard to authenticate users using OpenId
+Category: OpenId Providers
+Features:
+    Orchard.OpenId:
+        Description: Enables Orchard to authenticate users using OpenId
+		Category: Authentication
+		Name: OpenId
+    Orchard.OpenId.Facebook:
+        Description: Enables Orchard to authenticate users using their Facebook Accounts
+		Category: Authentication
+		Name: Facebook
+		Dependencies: Orchard.OpenId
+    Orchard.OpenId.Google:
+        Description: Enables Orchard to authenticate users using their Google Accounts
+		Category: Authentication
+		Name: Google
+		Dependencies: Orchard.OpenId
+    Orchard.OpenId.Twitter:
+        Description: Enables Orchard to authenticate users using their Twitter Accounts
+		Category: Authentication
+		Name: Twitter
+		Dependencies: Orchard.OpenId
+    Orchard.OpenId.AzureActiveDirectory:
+        Description: Enables Orchard to authenticate users using their Azure AD Accounts
+		Category: Authentication
+		Name: Azure Active Directory (AAD)
+		Dependencies: Orchard.OpenId
+    Orchard.OpenId.ActiveDirectoryFederationServices:
+        Description: Enables Orchard to authenticate users using their ADFS Accounts
+		Category: Authentication
+		Name: Active Directory Federation Services (ADFS)
+		Dependencies: Orchard.OpenId

src/Orchard.Web/Modules/Orchard.OpenId/Orchard.OpenId.csproj

@@ -0,0 +1,342 @@
+<?xml version="1.0" encoding="utf-8"?>
+<Project ToolsVersion="12.0" DefaultTargets="Build" xmlns="http://schemas.microsoft.com/developer/msbuild/2003">
+  <Import Project="$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props" Condition="Exists('$(MSBuildExtensionsPath)\$(MSBuildToolsVersion)\Microsoft.Common.props')" />
+  <PropertyGroup>
+    <Configuration Condition=" '$(Configuration)' == '' ">Debug</Configuration>
+    <Platform Condition=" '$(Platform)' == '' ">AnyCPU</Platform>
+    <ProductVersion>9.0.30729</ProductVersion>
+    <SchemaVersion>2.0</SchemaVersion>
+    <ProjectGuid>{42E217C1-E163-4B6B-9E8F-42BEE21B6896}</ProjectGuid>
+    <ProjectTypeGuids>{349c5851-65df-11da-9384-00065b846f21};{fae04ec0-301f-11d3-bf4b-00c04f79efbc}</ProjectTypeGuids>
+    <OutputType>Library</OutputType>
+    <AppDesignerFolder>Properties</AppDesignerFolder>
+    <RootNamespace>Orchard.OpenId</RootNamespace>
+    <AssemblyName>Orchard.OpenId</AssemblyName>
+    <TargetFrameworkVersion>v4.5.2</TargetFrameworkVersion>
+    <MvcBuildViews>false</MvcBuildViews>
+    <FileUpgradeFlags>
+    </FileUpgradeFlags>
+    <OldToolsVersion>4.0</OldToolsVersion>
+    <UpgradeBackupLocation />
+    <TargetFrameworkProfile />
+    <UseIISExpress>false</UseIISExpress>
+    <IISExpressSSLPort />
+    <IISExpressAnonymousAuthentication />
+    <IISExpressWindowsAuthentication />
+    <IISExpressUseClassicPipelineMode />
+    <UseGlobalApplicationHostFile />
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Debug|AnyCPU' ">
+    <DebugSymbols>true</DebugSymbols>
+    <DebugType>full</DebugType>
+    <Optimize>false</Optimize>
+    <OutputPath>bin\</OutputPath>
+    <DefineConstants>DEBUG;TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+    <CodeAnalysisRuleSet>..\..\..\OrchardBasicCorrectness.ruleset</CodeAnalysisRuleSet>
+    <Prefer32Bit>false</Prefer32Bit>
+  </PropertyGroup>
+  <PropertyGroup Condition=" '$(Configuration)|$(Platform)' == 'Release|AnyCPU' ">
+    <DebugType>pdbonly</DebugType>
+    <Optimize>true</Optimize>
+    <OutputPath>bin\</OutputPath>
+    <DefineConstants>TRACE</DefineConstants>
+    <ErrorReport>prompt</ErrorReport>
+    <WarningLevel>4</WarningLevel>
+    <CodeAnalysisRuleSet>AllRules.ruleset</CodeAnalysisRuleSet>
+    <Prefer32Bit>false</Prefer32Bit>
+  </PropertyGroup>
+  <ItemGroup>
+    <Reference Include="Iesi.Collections, Version=4.0.0.0, Culture=neutral, PublicKeyToken=aa95f207798dfdb4, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Iesi.Collections.4.0.0.4000\lib\net40\Iesi.Collections.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Azure.ActiveDirectory.GraphClient, Version=2.1.10.0, Culture=neutral, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Azure.ActiveDirectory.GraphClient.2.1.1\lib\portable-net4+sl5+win+wpa+wp8\Microsoft.Azure.ActiveDirectory.GraphClient.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.CSharp" />
+    <Reference Include="Microsoft.Data.Edm, Version=5.6.4.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Data.Edm.5.6.4\lib\net40\Microsoft.Data.Edm.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Data.OData, Version=5.6.4.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Data.OData.5.6.4\lib\net40\Microsoft.Data.OData.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Data.Services.Client, Version=5.6.4.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Data.Services.Client.5.6.4\lib\net40\Microsoft.Data.Services.Client.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.IdentityModel.Clients.ActiveDirectory, Version=3.13.5.907, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.IdentityModel.Clients.ActiveDirectory.3.13.5\lib\net45\Microsoft.IdentityModel.Clients.ActiveDirectory.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.IdentityModel.Clients.ActiveDirectory.Platform, Version=3.13.5.907, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.IdentityModel.Clients.ActiveDirectory.3.13.5\lib\net45\Microsoft.IdentityModel.Clients.ActiveDirectory.Platform.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.IdentityModel.Protocol.Extensions, Version=1.0.2.33, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.IdentityModel.Protocol.Extensions.1.0.2.206221351\lib\net45\Microsoft.IdentityModel.Protocol.Extensions.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.3.0.1\lib\net45\Microsoft.Owin.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Host.SystemWeb, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Host.SystemWeb.3.0.1\lib\net45\Microsoft.Owin.Host.SystemWeb.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.3.0.1\lib\net45\Microsoft.Owin.Security.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security.ActiveDirectory, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.ActiveDirectory.3.0.1\lib\net45\Microsoft.Owin.Security.ActiveDirectory.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security.Cookies, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.Cookies.3.0.1\lib\net45\Microsoft.Owin.Security.Cookies.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security.Facebook, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.Facebook.3.0.1\lib\net45\Microsoft.Owin.Security.Facebook.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security.Google, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.Google.3.0.1\lib\net45\Microsoft.Owin.Security.Google.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security.Jwt, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.Jwt.3.0.1\lib\net45\Microsoft.Owin.Security.Jwt.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security.OAuth, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.OAuth.3.0.1\lib\net45\Microsoft.Owin.Security.OAuth.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security.OpenIdConnect, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.OpenIdConnect.3.0.1\lib\net45\Microsoft.Owin.Security.OpenIdConnect.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Owin.Security.Twitter, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Owin.Security.Twitter.3.0.1\lib\net45\Microsoft.Owin.Security.Twitter.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Microsoft.Web.Infrastructure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.Web.Infrastructure.1.0.0.0\lib\net40\Microsoft.Web.Infrastructure.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Newtonsoft.Json, Version=6.0.0.0, Culture=neutral, PublicKeyToken=30ad4fe6b2a6aeed, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Newtonsoft.Json.6.0.4\lib\net45\Newtonsoft.Json.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="NHibernate, Version=4.0.0.4000, Culture=neutral, PublicKeyToken=aa95f207798dfdb4, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\NHibernate.4.0.4.4000\lib\net40\NHibernate.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="Owin, Version=1.0.0.0, Culture=neutral, PublicKeyToken=f0ebd12fd5e55cc5, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Owin.1.0\lib\net40\Owin.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="System" />
+    <Reference Include="System.Data" />
+    <Reference Include="System.ComponentModel.DataAnnotations">
+      <RequiredTargetFramework>3.5</RequiredTargetFramework>
+    </Reference>
+    <Reference Include="System.Data.DataSetExtensions" />
+    <Reference Include="System.IdentityModel" />
+    <Reference Include="System.IdentityModel.Tokens.Jwt, Version=4.0.20622.1351, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\System.IdentityModel.Tokens.Jwt.4.0.2.206221351\lib\net45\System.IdentityModel.Tokens.Jwt.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="System.Net.Http" />
+    <Reference Include="System.Runtime.Serialization" />
+    <Reference Include="System.ServiceModel" />
+    <Reference Include="System.Spatial, Version=5.6.4.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\System.Spatial.5.6.4\lib\net40\System.Spatial.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="System.Web.ApplicationServices" />
+    <Reference Include="System.Web.DynamicData" />
+    <Reference Include="System.Web.Entity" />
+    <Reference Include="System.Web.Extensions" />
+    <Reference Include="System.Web.Helpers, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.AspNet.WebPages.3.2.3\lib\net45\System.Web.Helpers.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="System.Web.Mvc, Version=5.2.3, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <SpecificVersion>False</SpecificVersion>
+      <HintPath>..\..\..\packages\Microsoft.AspNet.Mvc.5.2.3\lib\net45\System.Web.Mvc.dll</HintPath>
+    </Reference>
+    <Reference Include="System.Web" />
+    <Reference Include="System.Web.Abstractions" />
+    <Reference Include="System.Web.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.AspNet.Razor.3.2.3\lib\net45\System.Web.Razor.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="System.Web.Routing" />
+    <Reference Include="System.Web.WebPages, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.AspNet.WebPages.3.2.3\lib\net45\System.Web.WebPages.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="System.Web.WebPages.Deployment, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.AspNet.WebPages.3.2.3\lib\net45\System.Web.WebPages.Deployment.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="System.Web.WebPages.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\..\..\packages\Microsoft.AspNet.WebPages.3.2.3\lib\net45\System.Web.WebPages.Razor.dll</HintPath>
+      <Private>True</Private>
+    </Reference>
+    <Reference Include="System.Xml" />
+    <Reference Include="System.Configuration" />
+    <Reference Include="System.Xml.Linq" />
+  </ItemGroup>
+  <ItemGroup>
+    <Compile Include="Constants\ActiveDirectoryFederationServices.cs" />
+    <Compile Include="Constants\AzureActiveDirectory.cs" />
+    <Compile Include="Constants\Facebook.cs" />
+    <Compile Include="Constants\General.cs" />
+    <Compile Include="Constants\Google.cs" />
+    <Compile Include="Constants\Twitter.cs" />
+    <Compile Include="Controllers\AccountController.cs" />
+    <Compile Include="Handlers\ActiveDirectoryFederationServicesSettingsPartHandler.cs" />
+    <Compile Include="Handlers\AzureActiveDirectorySettingsPartHandler.cs" />
+    <Compile Include="Handlers\FacebookSettingsPartHandler.cs" />
+    <Compile Include="Handlers\GoogleSettingsPartHandler.cs" />
+    <Compile Include="Handlers\OpenIdSettingsPartHandler.cs" />
+    <Compile Include="Handlers\TwitterSettingsPartHandler.cs" />
+    <Compile Include="Models\ActiveDirectoryFederationServicesSettingsPart.cs" />
+    <Compile Include="Models\AzureActiveDirectorySettingsPart.cs" />
+    <Compile Include="Models\FacebookSettingsPart.cs" />
+    <Compile Include="Models\GoogleSettingsPart.cs" />
+    <Compile Include="Models\TwitterSettingsPart.cs" />
+    <Compile Include="OwinMiddlewares\OpenId.cs" />
+    <Compile Include="Permissions.cs" />
+    <Compile Include="Providers\ActiveDirectoryFederationServices.cs" />
+    <Compile Include="Providers\AzureActiveDirectory.cs" />
+    <Compile Include="Providers\Twitter.cs" />
+    <Compile Include="Providers\Facebook.cs" />
+    <Compile Include="Providers\Google.cs" />
+    <Compile Include="ResourceManifest.cs" />
+    <Compile Include="Services\AzureActiveDirectory\IAzureActiveDirectoryService.cs" />
+    <Compile Include="Services\Twitter\MissingSettingsBanner.cs" />
+    <Compile Include="Services\AzureActiveDirectory\MissingSettingsBanner.cs" />
+    <Compile Include="Services\AzureActiveDirectory\InMemoryCache.cs" />
+    <Compile Include="OwinMiddlewares\ActiveDirectoryFederationServices.cs" />
+    <Compile Include="OwinMiddlewares\AzureActiveDirectory.cs" />
+    <Compile Include="OwinMiddlewares\Twitter.cs" />
+    <Compile Include="OwinMiddlewares\Facebook.cs" />
+    <Compile Include="OwinMiddlewares\Google.cs" />
+    <Compile Include="Routes\OpenId.cs" />
+    <Compile Include="Properties\AssemblyInfo.cs" />
+    <Compile Include="Security\MachineKeyDataProtector.cs" />
+    <Compile Include="Services\AzureActiveDirectory\AzureActiveDirectoryService.cs" />
+    <Compile Include="Services\OpenIdAuthenticationService.cs" />
+    <Compile Include="Services\Facebook\MissingSettingsBanner.cs" />
+    <Compile Include="Services\Google\MissingSettingsBanner.cs" />
+    <Compile Include="Services\IOpenIdProvider.cs" />
+    <Compile Include="Services\ActiveDirectoryFederationServices\MissingSettingsBanner.cs" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="Scripts\twitter-admin.js" />
+    <Content Include="Styles\twitter-admin.css" />
+    <Content Include="Web.config" />
+    <Content Include="Module.txt" />
+  </ItemGroup>
+  <ItemGroup>
+    <ProjectReference Include="..\..\..\Orchard\Orchard.Framework.csproj">
+      <Project>{2D1D92BB-4555-4CBE-8D0E-63563D6CE4C6}</Project>
+      <Name>Orchard.Framework</Name>
+      <Private>false</Private>
+    </ProjectReference>
+    <ProjectReference Include="..\..\Core\Orchard.Core.csproj">
+      <Project>{9916839C-39FC-4CEB-A5AF-89CA7E87119F}</Project>
+      <Name>Orchard.Core</Name>
+      <Private>false</Private>
+    </ProjectReference>
+    <ProjectReference Include="..\Orchard.Roles\Orchard.Roles.csproj">
+      <Project>{d10ad48f-407d-4db5-a328-173ec7cb010f}</Project>
+      <Name>Orchard.Roles</Name>
+    </ProjectReference>
+    <ProjectReference Include="..\Orchard.Users\Orchard.Users.csproj">
+      <Project>{79AED36E-ABD0-4747-93D3-8722B042454B}</Project>
+      <Name>Orchard.Users</Name>
+    </ProjectReference>
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="placement.info" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="packages.config" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="Views\Account\AccessDenied.cshtml" />
+    <Content Include="Views\Account\Error.cshtml" />
+    <Content Include="Views\EditorTemplates\Parts.AzureActiveDirectorySettings.cshtml" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="Views\Account\Logon.cshtml" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="Views\User.cshtml" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="Views\EditorTemplates\Parts.ActiveDirectoryFederationServicesSettings.cshtml" />
+    <Content Include="Views\EditorTemplates\Parts.FacebookSettings.cshtml" />
+    <Content Include="Views\EditorTemplates\Parts.GoogleSettings.cshtml" />
+    <Content Include="Views\EditorTemplates\Parts.TwitterSettings.cshtml" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="Styles\Web.config" />
+  </ItemGroup>
+  <ItemGroup>
+    <Content Include="Scripts\Web.config" />
+  </ItemGroup>
+  <PropertyGroup>
+    <VisualStudioVersion Condition="'$(VisualStudioVersion)' == ''">10.0</VisualStudioVersion>
+    <VSToolsPath Condition="'$(VSToolsPath)' == ''">$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v$(VisualStudioVersion)</VSToolsPath>
+  </PropertyGroup>
+  <Import Project="$(MSBuildBinPath)\Microsoft.CSharp.targets" />
+  <Import Project="$(VSToolsPath)\WebApplications\Microsoft.WebApplication.targets" Condition="'$(VSToolsPath)' != ''" />
+  <Import Project="$(MSBuildExtensionsPath32)\Microsoft\VisualStudio\v10.0\WebApplications\Microsoft.WebApplication.targets" Condition="false" />
+  <!-- To modify your build process, add your task inside one of the targets below and uncomment it. 
+       Other similar extension points exist, see Microsoft.Common.targets.
+  <Target Name="BeforeBuild">
+  </Target> -->
+  <Target Name="AfterBuild" DependsOnTargets="AfterBuildCompiler">
+    <PropertyGroup>
+      <AreasManifestDir>$(ProjectDir)\..\Manifests</AreasManifestDir>
+    </PropertyGroup>
+    <!-- If this is an area child project, uncomment the following line:
+    <CreateAreaManifest AreaName="$(AssemblyName)" AreaType="Child" AreaPath="$(ProjectDir)" ManifestPath="$(AreasManifestDir)" ContentFiles="@(Content)" />
+    -->
+    <!-- If this is an area parent project, uncomment the following lines:
+    <CreateAreaManifest AreaName="$(AssemblyName)" AreaType="Parent" AreaPath="$(ProjectDir)" ManifestPath="$(AreasManifestDir)" ContentFiles="@(Content)" />
+    <CopyAreaManifests ManifestPath="$(AreasManifestDir)" CrossCopy="false" RenameViews="true" />
+    -->
+  </Target>
+  <Target Name="AfterBuildCompiler" Condition="'$(MvcBuildViews)'=='true'">
+    <AspNetCompiler VirtualPath="temp" PhysicalPath="$(ProjectDir)\..\$(ProjectName)" />
+  </Target>
+  <ProjectExtensions>
+    <VisualStudio>
+      <FlavorProperties GUID="{349c5851-65df-11da-9384-00065b846f21}">
+        <WebProjectProperties>
+          <UseIIS>False</UseIIS>
+          <AutoAssignPort>True</AutoAssignPort>
+          <DevelopmentServerPort>45979</DevelopmentServerPort>
+          <DevelopmentServerVPath>/</DevelopmentServerVPath>
+          <IISUrl>
+          </IISUrl>
+          <NTLMAuthentication>False</NTLMAuthentication>
+          <UseCustomServer>True</UseCustomServer>
+          <CustomServerUrl>http://orchard.codeplex.com</CustomServerUrl>
+          <SaveServerSettingsInUserFile>False</SaveServerSettingsInUserFile>
+        </WebProjectProperties>
+      </FlavorProperties>
+    </VisualStudio>
+  </ProjectExtensions>
+</Project>

src/Orchard.Web/Modules/Orchard.OpenId/OwinMiddlewares/ActiveDirectoryFederationServices.cs

@@ -0,0 +1,53 @@
+using System.Collections.Generic;
+using System.Linq;
+using System.Threading.Tasks;
+using Microsoft.Owin.Security.OpenIdConnect;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.Owin;
+using Owin;
+
+namespace Orchard.OpenId.OwinMiddlewares {
+    [OrchardFeature("Orchard.OpenId.ActiveDirectoryFederationServices")]
+    public class ActiveDirectoryFederationServices : IOwinMiddlewareProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public ActiveDirectoryFederationServices(IWorkContextAccessor workContextAccessor) {
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public IEnumerable<OwinMiddlewareRegistration> GetOwinMiddlewares() {
+            var settings = _workContextAccessor.GetContext().CurrentSite.As<ActiveDirectoryFederationServicesSettingsPart>();
+
+            if (settings == null || !settings.IsValid) {
+                return Enumerable.Empty<OwinMiddlewareRegistration>();
+            }
+
+            var openIdOptions = new OpenIdConnectAuthenticationOptions {
+                ClientId = settings.ClientId,
+                MetadataAddress = settings.MetadataAddress,
+                RedirectUri = settings.PostLogoutRedirectUri,
+                PostLogoutRedirectUri = settings.PostLogoutRedirectUri,
+                Notifications = new OpenIdConnectAuthenticationNotifications()
+                {
+                   AuthenticationFailed = context => {
+                        context.HandleResponse();
+                        context.Response.Redirect(Constants.General.AuthenticationErrorUrl);
+
+                       return Task.FromResult(0);
+                    }
+                }
+            };
+
+            return new List<OwinMiddlewareRegistration> {
+                new OwinMiddlewareRegistration {
+                    Priority = Constants.General.OpenIdOwinMiddlewarePriority,
+                    Configure = app => {
+                        app.UseOpenIdConnectAuthentication(openIdOptions);
+                    }
+                }
+            };
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/OwinMiddlewares/AzureActiveDirectory.cs

@@ -0,0 +1,155 @@
+using System;
+using System.Collections.Generic;
+using System.Globalization;
+using System.Linq;
+using System.Security.Claims;
+using System.Threading.Tasks;
+using System.Web;
+using System.Web.Helpers;
+using System.Web.WebPages;
+using Microsoft.IdentityModel.Clients.ActiveDirectory;
+using Microsoft.Owin.Security.DataProtection;
+using Microsoft.Owin.Security.OpenIdConnect;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.Logging;
+using Orchard.OpenId.Models;
+using Orchard.OpenId.Security;
+using Orchard.OpenId.Services.AzureActiveDirectory;
+using Orchard.Owin;
+using Owin;
+using LogLevel = Orchard.Logging.LogLevel;
+
+namespace Orchard.OpenId.OwinMiddlewares {
+    [OrchardFeature("Orchard.OpenId.AzureActiveDirectory")]
+    public class AzureActiveDirectory : IOwinMiddlewareProvider {
+        public ILogger Logger { get; set; }
+
+        private readonly IWorkContextAccessor _workContextAccessor;
+        private readonly InMemoryCache _inMemoryCache;
+        private readonly IAzureActiveDirectoryService _azureActiveDirectoryService;
+        private string _azureGraphApiUri;
+        private string _azureGraphApiKey;
+        private string _azureClientId;
+        private string _azureTenant;
+        private string _azureAdInstance;
+
+        public AzureActiveDirectory(
+            IWorkContextAccessor workContextAccessor,
+            IAzureActiveDirectoryService azureActiveDirectoryService,
+            InMemoryCache inMemoryCache) {
+            _workContextAccessor = workContextAccessor;
+            _azureActiveDirectoryService = azureActiveDirectoryService;
+            _inMemoryCache = inMemoryCache;
+
+            Logger = NullLogger.Instance;
+        }
+
+        public IEnumerable<OwinMiddlewareRegistration> GetOwinMiddlewares() {
+            var settings = _workContextAccessor.GetContext().CurrentSite.As<AzureActiveDirectorySettingsPart>();
+            var logoutRedirectUri = string.Empty;
+            var azureAppKey = string.Empty;
+            var azureWebSiteProtectionEnabled = false;
+            var azureUseAzureGraphApi = false;
+
+            if (settings == null || !settings.IsValid) {
+                return Enumerable.Empty<OwinMiddlewareRegistration>();
+            }
+
+            _azureClientId = settings.ClientId;
+            _azureTenant = settings.Tenant;
+            _azureAdInstance = settings.ADInstance;
+            _azureGraphApiUri = settings.GraphApiUrl;
+            logoutRedirectUri = settings.LogoutRedirectUri;
+            azureWebSiteProtectionEnabled = settings.AzureWebSiteProtectionEnabled;
+            azureAppKey = settings.AppKey;
+            azureUseAzureGraphApi = settings.UseAzureGraphApi;
+
+            var authority = string.Format(CultureInfo.InvariantCulture, _azureAdInstance, _azureTenant);
+            var middlewares = new List<OwinMiddlewareRegistration>();
+
+            AntiForgeryConfig.UniqueClaimTypeIdentifier = ClaimTypes.NameIdentifier;
+
+            var openIdOptions = new OpenIdConnectAuthenticationOptions {
+                ClientId = _azureClientId,
+                Authority = authority,
+                PostLogoutRedirectUri = logoutRedirectUri,
+                Notifications = new OpenIdConnectAuthenticationNotifications() {
+                    AuthorizationCodeReceived = (context) => {
+                        var code = context.Code;
+                        var credential = new ClientCredential(_azureClientId, azureAppKey);
+                        _inMemoryCache.UserObjectId = context.AuthenticationTicket.Identity.FindFirst(Constants.AzureActiveDirectory.ObjectIdentifierKey).Value;
+                        var authContext = new AuthenticationContext(authority, _inMemoryCache);
+                        var result = authContext.AcquireTokenByAuthorizationCodeAsync(code, new Uri(HttpContext.Current.Request.Url.GetLeftPart(UriPartial.Path)), credential, _azureGraphApiUri).Result;
+
+                        return Task.FromResult(0);
+                    },
+                    AuthenticationFailed = context => {
+                        context.HandleResponse();
+                        context.Response.Redirect(Constants.General.AuthenticationErrorUrl);
+
+                        return Task.FromResult(0);
+                    }
+                }
+
+            };
+
+            if (azureWebSiteProtectionEnabled) {
+                middlewares.Add(new OwinMiddlewareRegistration {
+                    Priority = "9",
+                    Configure = app => { app.SetDataProtectionProvider(new MachineKeyProtectionProvider()); }
+                });
+            }
+
+            middlewares.Add(new OwinMiddlewareRegistration {
+                Priority = Constants.General.OpenIdOwinMiddlewarePriority,
+                Configure = app => {
+                    app.UseOpenIdConnectAuthentication(openIdOptions);
+                }
+            });
+
+            if (azureUseAzureGraphApi) {
+                middlewares.Add(new OwinMiddlewareRegistration {
+                    Priority = "11",
+                    Configure = app => app.Use(async (context, next) => {
+                        try {
+                            if (_azureActiveDirectoryService.Token == null && _azureActiveDirectoryService.Token.IsEmpty()) {
+                                RegenerateAzureGraphApiToken();
+                            }
+                            else {
+                                if (DateTimeOffset.Compare(DateTimeOffset.UtcNow, _azureActiveDirectoryService.TokenExpiresOn) > 0) {
+                                    RegenerateAzureGraphApiToken();
+                                }
+                            }
+                        }
+                        catch (Exception ex) {
+                            Logger.Log(LogLevel.Error, ex, "An error occurred generating azure api credential {0}", ex.Message);
+                        }
+
+                        await next.Invoke();
+                    })
+                });
+            }
+
+            return middlewares;
+        }
+
+        private void RegenerateAzureGraphApiToken() {
+            var result = GetAuthContext().AcquireTokenAsync(_azureGraphApiUri, GetClientCredential()).Result;
+
+            _azureActiveDirectoryService.TokenExpiresOn = result.ExpiresOn;
+            _azureActiveDirectoryService.Token = result.AccessToken;
+            _azureActiveDirectoryService.AzureTenant = _azureTenant;
+        }
+
+        private ClientCredential GetClientCredential() {
+            return new ClientCredential(_azureClientId, _azureGraphApiKey);
+        }
+
+        private AuthenticationContext GetAuthContext() {
+            var authority = string.Format(CultureInfo.InvariantCulture, _azureAdInstance, _azureTenant);
+
+            return new AuthenticationContext(authority, false);
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/OwinMiddlewares/Facebook.cs

@@ -0,0 +1,38 @@
+using System.Collections.Generic;
+using System.Linq;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.Owin;
+using Owin;
+
+namespace Orchard.OpenId.OwinMiddlewares {
+    [OrchardFeature("Orchard.OpenId.Facebook")]
+    public class Facebook : IOwinMiddlewareProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public Facebook(IWorkContextAccessor workContextAccessor) {
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public IEnumerable<OwinMiddlewareRegistration> GetOwinMiddlewares() {
+            var settings = _workContextAccessor.GetContext().CurrentSite.As<FacebookSettingsPart>();
+
+            if (settings == null || !settings.IsValid) {
+                return Enumerable.Empty<OwinMiddlewareRegistration>();
+            }
+
+            return new List<OwinMiddlewareRegistration> {
+                new OwinMiddlewareRegistration {
+                    Priority = Constants.General.OpenIdOwinMiddlewarePriority,
+                    Configure = app => {
+                        app.UseFacebookAuthentication(
+                             appId: settings.AppId,
+                             appSecret: settings.AppSecret
+                        );
+                    }
+                }
+            };
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/OwinMiddlewares/Google.cs

@@ -0,0 +1,43 @@
+using System.Collections.Generic;
+using System.Linq;
+using Microsoft.Owin;
+using Microsoft.Owin.Security.Google;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.Owin;
+using Owin;
+
+namespace Orchard.OpenId.OwinMiddlewares {
+    [OrchardFeature("Orchard.OpenId.Google")]
+    public class Google : IOwinMiddlewareProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public Google(IWorkContextAccessor workContextAccessor) {
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public IEnumerable<OwinMiddlewareRegistration> GetOwinMiddlewares() {
+            var settings = _workContextAccessor.GetContext().CurrentSite.As<GoogleSettingsPart>();
+
+            if (settings == null || !settings.IsValid) {
+                return Enumerable.Empty<OwinMiddlewareRegistration>();
+            }
+
+            var authenticationOptions = new GoogleOAuth2AuthenticationOptions {
+                ClientId = settings.ClientId,
+                ClientSecret = settings.ClientSecret,
+                CallbackPath = new PathString(settings.CallbackPath)
+            };
+
+            return new List<OwinMiddlewareRegistration> {
+                new OwinMiddlewareRegistration {
+                    Priority = Constants.General.OpenIdOwinMiddlewarePriority,
+                    Configure = app => {
+                        app.UseGoogleAuthentication(authenticationOptions);
+                    }
+                }
+            };
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/OwinMiddlewares/OpenId.cs

@@ -0,0 +1,32 @@
+using System.Collections.Generic;
+using System.Security.Claims;
+using System.Web.Helpers;
+using Microsoft.Owin.Security;
+using Microsoft.Owin.Security.Cookies;
+using Orchard.Environment.Extensions;
+using Orchard.Owin;
+using Owin;
+
+namespace Orchard.OpenId.OwinMiddlewares {
+    [OrchardFeature("Orchard.OpenId")]
+    public class OpenId : IOwinMiddlewareProvider
+    {
+        public IEnumerable<OwinMiddlewareRegistration> GetOwinMiddlewares()
+        {
+            var cookieOptions = new CookieAuthenticationOptions();
+            var authenticationType = CookieAuthenticationDefaults.AuthenticationType;
+
+            AntiForgeryConfig.UniqueClaimTypeIdentifier = ClaimTypes.NameIdentifier;
+
+            return new List<OwinMiddlewareRegistration> {
+                new OwinMiddlewareRegistration {
+                    Priority = "9",
+                    Configure = app => {
+                        app.SetDefaultSignInAsAuthenticationType(authenticationType);
+                        app.UseCookieAuthentication(cookieOptions);
+                    }
+                }
+            };
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/OwinMiddlewares/Twitter.cs

@@ -0,0 +1,51 @@
+using System.Collections.Generic;
+using System.Linq;
+using Microsoft.Owin.Security;
+using Microsoft.Owin.Security.Twitter;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.Owin;
+using Owin;
+
+namespace Orchard.OpenId.OwinMiddlewares {
+    [OrchardFeature("Orchard.OpenId.Twitter")]
+    public class Twitter : IOwinMiddlewareProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public Twitter(IWorkContextAccessor workContextAccessor) {
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public IEnumerable<OwinMiddlewareRegistration> GetOwinMiddlewares() {
+            var settings = _workContextAccessor.GetContext().CurrentSite.As<TwitterSettingsPart>();
+
+            if (settings == null || !settings.IsValid) {
+                return Enumerable.Empty<OwinMiddlewareRegistration>();
+            }
+
+            var twitterOptions = new TwitterAuthenticationOptions {
+                ConsumerKey = settings.ConsumerKey,
+                ConsumerSecret = settings.ConsumerSecret,
+                BackchannelCertificateValidator = new CertificateSubjectKeyIdentifierValidator(new[]
+                {
+                    settings.VeriSignClass3SecureServerCA_G2,
+                    settings.VeriSignClass3SecureServerCA_G3,
+                    settings.VeriSignClass3PublicPrimaryCA_G5,
+                    settings.SymantecClass3SecureServerCA_G4,
+                    settings.DigiCertSHA2HighAssuranceServerCA,
+                    settings.DigiCertHighAssuranceEVRootCA 
+                })
+            };
+
+            return new List<OwinMiddlewareRegistration> {
+                new OwinMiddlewareRegistration {
+                    Priority = Constants.General.OpenIdOwinMiddlewarePriority,
+                    Configure = app => {
+                        app.UseTwitterAuthentication(twitterOptions);
+                    }
+                }
+            };
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Permissions.cs

@@ -0,0 +1,27 @@
+using System.Collections.Generic;
+using Orchard.Environment.Extensions.Models;
+using Orchard.Security.Permissions;
+
+namespace Orchard.OpenId {
+    public class Permissions : IPermissionProvider {
+        public static readonly Permission ManageOpenId = new Permission { Description = "Manage OpenId settings", Name = "ManageOpenId" };
+
+        public virtual Feature Feature { get; set; }
+
+        public IEnumerable<Permission> GetPermissions() {
+            return new[] {
+                ManageOpenId,
+            };
+        }
+
+        public IEnumerable<PermissionStereotype> GetDefaultStereotypes() {
+            return new[] {
+                new PermissionStereotype {
+                    Name = "Administrator",
+                    Permissions = new[] {ManageOpenId}
+                },
+            };
+        }
+
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Properties/AssemblyInfo.cs

@@ -0,0 +1,37 @@
+using System.Reflection;
+using System.Runtime.CompilerServices;
+using System.Runtime.InteropServices;
+using System.Security;
+
+// General Information about an assembly is controlled through the following 
+// set of attributes. Change these attribute values to modify the information
+// associated with an assembly.
+[assembly: AssemblyTitle("Orchard.OpenId")]
+[assembly: AssemblyDescription("")]
+[assembly: AssemblyConfiguration("")]
+[assembly: AssemblyProduct("Orchard")]
+[assembly: AssemblyCopyright("")]
+[assembly: AssemblyTrademark("")]
+[assembly: AssemblyCulture("")]
+
+// Setting ComVisible to false makes the types in this assembly not visible 
+// to COM components.  If you need to access a type in this assembly from 
+// COM, set the ComVisible attribute to true on that type.
+[assembly: ComVisible(false)]
+
+// The following GUID is for the ID of the typelib if this project is exposed to COM
+[assembly: Guid("1bf62a51-6313-4204-bd2f-660c3cc8e3b9")]
+
+// Version information for an assembly consists of the following four values:
+//
+//      Major Version
+//      Minor Version 
+//      Build Number
+//      Revision
+//
+// You can specify all the values or you can default the Revision and Build Numbers 
+// by using the '*' as shown below:
+
+[assembly: AssemblyVersion("1.10.1")]
+[assembly: AssemblyFileVersion("1.10.1")]
+

src/Orchard.Web/Modules/Orchard.OpenId/Providers/ActiveDirectoryFederationServices.cs

@@ -0,0 +1,52 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.OpenId.Services;
+using Orchard.Settings;
+
+namespace Orchard.OpenId.Providers {
+    [OrchardFeature("Orchard.OpenId.ActiveDirectoryFederationServices")]
+    public class ActiveDirectoryFederationServices : IOpenIdProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public ActiveDirectoryFederationServices(
+            IWorkContextAccessor workContextAccessor) {
+
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public string AuthenticationType {
+            get { return "OpenIdConnect"; }
+        }
+
+        public string Name {
+            get { return "ADFS"; }
+        }
+
+        public string DisplayName {
+            get { return "Active Directory Federation Services"; }
+        }
+
+        public bool IsValid {
+            get { return IsProviderValid(); }
+        }
+
+        private bool IsProviderValid() {
+            try {
+                ActiveDirectoryFederationServicesSettingsPart settings;
+                ISite site;
+
+                var scope = _workContextAccessor.GetContext();
+
+                site = scope.Resolve<ISiteService>().GetSiteSettings();
+                settings = site.As<ActiveDirectoryFederationServicesSettingsPart>();
+
+                return (settings != null && settings.IsValid);
+            }
+            catch (Exception) {
+                return false;
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Providers/AzureActiveDirectory.cs

@@ -0,0 +1,52 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.OpenId.Services;
+using Orchard.Settings;
+
+namespace Orchard.OpenId.Providers {
+    [OrchardFeature("Orchard.OpenId.AzureActiveDirectory")]
+    public class AzureActiveDirectory : IOpenIdProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public AzureActiveDirectory(
+            IWorkContextAccessor workContextAccessor) {
+
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public string AuthenticationType {
+            get { return "OpenIdConnect"; }
+        }
+
+        public string Name {
+            get { return "AzureAD"; }
+        }
+
+        public string DisplayName {
+            get { return "Azure Active Directory"; }
+        }
+
+        public bool IsValid {
+            get { return IsProviderValid(); }
+        }
+
+        private bool IsProviderValid() {
+            try {
+                AzureActiveDirectorySettingsPart settings;
+                ISite site;
+
+                var scope = _workContextAccessor.GetContext();
+
+                site = scope.Resolve<ISiteService>().GetSiteSettings();
+                settings = site.As<AzureActiveDirectorySettingsPart>();
+
+                return (settings != null && settings.IsValid);
+            }
+            catch (Exception) {
+                return false;
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Providers/Facebook.cs

@@ -0,0 +1,52 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.OpenId.Services;
+using Orchard.Settings;
+
+namespace Orchard.OpenId.Providers {
+    [OrchardFeature("Orchard.OpenId.Facebook")]
+    public class Facebook : IOpenIdProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public Facebook(
+            IWorkContextAccessor workContextAccessor) {
+
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public string AuthenticationType {
+            get { return "Facebook"; }
+        }
+
+        public string Name {
+            get { return "Facebook"; }
+        }
+
+        public string DisplayName {
+            get { return "Facebook"; }
+        }
+
+        public bool IsValid {
+            get { return IsProviderValid(); }
+        }
+
+        private bool IsProviderValid() {
+            try {
+                FacebookSettingsPart settings;
+                ISite site;
+
+                var scope = _workContextAccessor.GetContext();
+
+                site = scope.Resolve<ISiteService>().GetSiteSettings();
+                settings = site.As<FacebookSettingsPart>();
+
+                return (settings != null && settings.IsValid);
+            }
+            catch (Exception) {
+                return false;
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Providers/Google.cs

@@ -0,0 +1,53 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.OpenId.Services;
+using Orchard.Settings;
+
+namespace Orchard.OpenId.Providers {
+    [OrchardFeature("Orchard.OpenId.Google")]
+    public class Google : IOpenIdProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public Google(
+            IWorkContextAccessor workContextAccessor,
+            ISiteService siteService) {
+
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public string AuthenticationType {
+            get { return "Google"; }
+        }
+
+        public string Name {
+            get { return "Google"; }
+        }
+
+        public string DisplayName {
+            get { return "Google"; }
+        }
+
+        public bool IsValid {
+            get { return IsProviderValid(); }
+        }
+
+        private bool IsProviderValid() {
+            try {
+                GoogleSettingsPart settings;
+                ISite site;
+
+                var scope = _workContextAccessor.GetContext();
+
+                site = scope.Resolve<ISiteService>().GetSiteSettings();
+                settings = site.As<GoogleSettingsPart>();
+
+                return (settings != null && settings.IsValid);
+            }
+            catch (Exception) {
+                return false;
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Providers/Twitter.cs

@@ -0,0 +1,52 @@
+using System;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.OpenId.Models;
+using Orchard.OpenId.Services;
+using Orchard.Settings;
+
+namespace Orchard.OpenId.Providers {
+    [OrchardFeature("Orchard.OpenId.Twitter")]
+    public class Twitter : IOpenIdProvider {
+        private readonly IWorkContextAccessor _workContextAccessor;
+
+        public Twitter(
+            IWorkContextAccessor workContextAccessor) {
+
+            _workContextAccessor = workContextAccessor;
+        }
+
+        public string AuthenticationType {
+            get { return "Twitter"; }
+        }
+
+        public string Name {
+            get { return "Twitter"; }
+        }
+
+        public string DisplayName {
+            get { return "Twitter"; }
+        }
+
+        public bool IsValid {
+            get { return IsProviderValid(); }
+        }
+
+        private bool IsProviderValid() {
+            try {
+                TwitterSettingsPart settings;
+                ISite site;
+
+                var scope = _workContextAccessor.GetContext();
+
+                site = scope.Resolve<ISiteService>().GetSiteSettings();
+                settings = site.As<TwitterSettingsPart>();
+
+                return (settings != null && settings.IsValid);
+            }
+            catch (Exception) {
+                return false;
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/ResourceManifest.cs

@@ -0,0 +1,15 @@
+using Orchard.UI.Resources;
+
+namespace Orchard.OpenId
+{
+    public class ResourceManifest : IResourceManifestProvider
+    {
+        public void BuildManifests(ResourceManifestBuilder builder)
+        {
+            var manifest = builder.Add();
+
+            manifest.DefineStyle("TwitterAdmin").SetUrl("twitter-admin.css");
+            manifest.DefineScript("TwitterAdmin").SetUrl("twitter-admin.js");
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Routes/OpenId.cs

@@ -0,0 +1,83 @@
+using System.Collections.Generic;
+using System.Linq;
+using System.Web.Mvc;
+using System.Web.Routing;
+using Orchard.Mvc.Routes;
+using Orchard.OpenId.Services;
+
+namespace Orchard.Azure.Authentication {
+    public class OpenIdRoutes : IRouteProvider {
+        private readonly IEnumerable<IOpenIdProvider> _openIdProviders;
+
+        public OpenIdRoutes(IEnumerable<IOpenIdProvider> openIdProviders) {
+            _openIdProviders = openIdProviders;
+        }
+
+        public void GetRoutes(ICollection<RouteDescriptor> routes) {
+            foreach (var route in GetRoutes()) {
+                routes.Add(route);
+            }
+        }
+
+        public IEnumerable<RouteDescriptor> GetRoutes() {
+            if (IsAnyProviderSettingsValid() == false)
+                return Enumerable.Empty<RouteDescriptor>();
+
+            return new[] {
+                new RouteDescriptor {
+                    Priority = 11,
+                    Route = new Route(
+                        "Users/Account/Challenge/{openIdProvider}",
+                        new RouteValueDictionary {
+                            {"area", "Orchard.OpenId"},
+                            {"controller", "Account"},
+                            {"action", "Challenge"}
+                        },
+                        new RouteValueDictionary(),
+                        new RouteValueDictionary {
+                            {"area", "Orchard.OpenId"},
+                            {"controller", "Account"},
+                            {"action", "Challenge"}
+                        },
+                        new MvcRouteHandler())
+                },
+                new RouteDescriptor {
+                    Priority = 10,
+                    Route = new Route(
+                        "Users/Account/{action}",
+                        new RouteValueDictionary {
+                            {"area", "Orchard.OpenId"},
+                            {"controller", "Account"}
+                        },
+                        new RouteValueDictionary(),
+                        new RouteValueDictionary {
+                            {"area", "Orchard.OpenId"},
+                            {"controller", "Account"}
+                        },
+                        new MvcRouteHandler())
+                },
+                new RouteDescriptor {
+                    Priority = 10,
+                    Route = new Route(
+                        "Authentication/Error/",
+                        new RouteValueDictionary {
+                            {"area", "Orchard.OpenId"},
+                            {"controller", "Account"},
+                            { "action", "Error" }
+                        },
+                        new RouteValueDictionary(),
+                        new RouteValueDictionary {
+                            {"area", "Orchard.OpenId"},
+                            {"controller", "Account"},
+                            { "action", "Error" }
+                        },
+                        new MvcRouteHandler())
+                }
+            };
+        }
+
+        private bool IsAnyProviderSettingsValid() {
+            return _openIdProviders.Any(provider => provider.IsValid);
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Scripts/Web.config

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+    <system.webServer>
+        <staticContent>
+            <clientCache cacheControlMode="UseMaxAge" cacheControlMaxAge="7.00:00:00" />
+        </staticContent>
+        <handlers accessPolicy="Script,Read">
+            <!-- For any request to a file exists on disk, return it via native http module. AccessPolicy="Script" above is to allow for a managed 404 page. -->
+            <add name="StaticFile" path="*" verb="*" modules="StaticFileModule" preCondition="integratedMode" resourceType="File" requireAccess="Read" />
+        </handlers>
+    </system.webServer>
+</configuration>

src/Orchard.Web/Modules/Orchard.OpenId/Scripts/twitter-admin.js

@@ -0,0 +1,9 @@
+$(document).on('click', '#colExpControl', function () {
+    if ($('#colExpArea').css('display') == 'none') {
+        $('#colExpArea').show(300);
+        $('#colExpButton').html('-');
+    } else {
+        $('#colExpArea').hide(300);
+        $('#colExpButton').html('+');
+    }
+});

src/Orchard.Web/Modules/Orchard.OpenId/Security/MachineKeyDataProtector.cs

@@ -0,0 +1,26 @@
+using System.Web.Security;
+using Microsoft.Owin.Security.DataProtection;
+
+namespace Orchard.OpenId.Security {
+    public class MachineKeyProtectionProvider : IDataProtectionProvider {
+        public IDataProtector Create(params string[] purposes) {
+            return new MachineKeyDataProtector(purposes);
+        }
+    }
+
+    public class MachineKeyDataProtector : IDataProtector {
+        private readonly string[] _purposes;
+
+        public MachineKeyDataProtector(string[] purposes) {
+            _purposes = purposes;
+        }
+
+        public byte[] Protect(byte[] userData) {
+            return MachineKey.Protect(userData, _purposes);
+        }
+
+        public byte[] Unprotect(byte[] protectedData) {
+            return MachineKey.Unprotect(protectedData, _purposes);
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/ActiveDirectoryFederationServices/MissingSettingsBanner.cs

@@ -0,0 +1,35 @@
+using System.Collections.Generic;
+using System.Web.Mvc;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+using Orchard.UI.Admin.Notification;
+using Orchard.UI.Notify;
+
+namespace Orchard.Azure.Authentication.Services.ActiveDirectoryFederationServices {
+    [OrchardFeature("Orchard.OpenId.ActiveDirectoryFederationServices")]
+    public class MissingSettingsBanner : INotificationProvider {
+        private readonly IOrchardServices _orchardServices;
+        private readonly UrlHelper _urlHelper;
+
+        public MissingSettingsBanner(IOrchardServices orchardServices, UrlHelper urlHelper) {
+            _orchardServices = orchardServices;
+            _urlHelper = urlHelper;
+
+            T = NullLocalizer.Instance;
+        }
+
+        public Localizer T { get; set; }
+
+        public IEnumerable<NotifyEntry> GetNotifications() {
+            var workContext = _orchardServices.WorkContext;
+            var settings = workContext.CurrentSite.As<ActiveDirectoryFederationServicesSettingsPart>();
+
+            if (settings == null || !settings.IsValid) {
+                var url = _urlHelper.Action("OpenId", "Admin", new { Area = "Settings" });
+                yield return new NotifyEntry { Message = T("The <a href=\"{0}\">Active Directory Federation Services settings</a> need to be configured.", url), Type = NotifyType.Warning };
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/AzureActiveDirectory/AzureActiveDirectoryService.cs

@@ -0,0 +1,31 @@
+using System;
+using System.Threading.Tasks;
+using System.Web.WebPages;
+using Microsoft.Azure.ActiveDirectory.GraphClient;
+using Orchard.Environment.Extensions;
+
+namespace Orchard.OpenId.Services.AzureActiveDirectory {
+    [OrchardFeature("Orchard.OpenId.AzureActiveDirectory")]
+    public class AzureActiveDirectoryService : IAzureActiveDirectoryService {
+        public string Token { get; set; }
+        public DateTimeOffset TokenExpiresOn { get; set; }
+        public string AzureTenant { get; set; }
+
+        public async Task<string> AcquireTokenAsync() {
+            if (Token == null || Token.IsEmpty())
+            {
+                throw new Exception("Authorization Required.");
+            }
+            return await Task.FromResult(Token);
+        }
+
+        public ActiveDirectoryClient GetActiveDirectoryClient() {
+            var baseServiceUri = new Uri("https://graph.windows.net/");
+
+            var activeDirectoryClient = new ActiveDirectoryClient(new Uri(baseServiceUri, AzureTenant),
+                async () => await AcquireTokenAsync());
+
+            return activeDirectoryClient;
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/AzureActiveDirectory/IAzureActiveDirectoryService.cs

@@ -0,0 +1,13 @@
+using System;
+using System.Threading.Tasks;
+using Microsoft.Azure.ActiveDirectory.GraphClient;
+
+namespace Orchard.OpenId.Services.AzureActiveDirectory {
+    public interface IAzureActiveDirectoryService : ISingletonDependency {
+        string Token { get; set; }
+        DateTimeOffset TokenExpiresOn { get; set; }
+        string AzureTenant { get; set; }
+        Task<string> AcquireTokenAsync();
+        ActiveDirectoryClient GetActiveDirectoryClient();
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/AzureActiveDirectory/InMemoryCache.cs

@@ -0,0 +1,75 @@
+using System;
+using System.Collections.Concurrent;
+using Microsoft.IdentityModel.Clients.ActiveDirectory;
+using Orchard.Environment.Extensions;
+
+namespace Orchard.OpenId.Services.AzureActiveDirectory {
+    [OrchardFeature("Orchard.OpenId.AzureActiveDirectory")]
+    public class InMemoryCache : TokenCache, ISingletonDependency {
+        public InMemoryCache() {
+            _inMemoryTokenCache = new ConcurrentDictionary<string, byte[]>();
+
+            AfterAccess = AfterAccessNotification;
+            BeforeAccess = BeforeAccessNotification;
+
+            Load();
+        }
+
+        private const string CacheIdSuffix = "_TokenCache";
+        private static ConcurrentDictionary<string, byte[]> _inMemoryTokenCache;
+        private string _cacheId;
+        private string _userObjectId;
+
+        public string UserObjectId {
+            get {
+                return _userObjectId;
+            }
+            set {
+                _userObjectId = value;
+                _cacheId = String.Concat(_userObjectId, CacheIdSuffix);
+            }
+        }
+
+        public override void Clear() {
+            base.Clear();
+
+            if (String.IsNullOrWhiteSpace(_cacheId))
+                return;
+
+            byte[] oldData;
+            _inMemoryTokenCache.TryRemove(_cacheId, out oldData);
+        }
+
+        private void Load() {
+            if (String.IsNullOrWhiteSpace(_cacheId))
+                return;
+
+            if (_inMemoryTokenCache.ContainsKey(_cacheId)) {
+                byte[] data;
+                _inMemoryTokenCache.TryGetValue(_cacheId, out data);
+
+                if (data != default(byte[]))
+                    Deserialize(data);
+            }
+        }
+
+        private void Persist() {
+            if (String.IsNullOrWhiteSpace(_cacheId))
+                return;
+
+            HasStateChanged = false;
+
+            _inMemoryTokenCache.AddOrUpdate(_cacheId, Serialize(), (key, current) => { return Serialize(); });
+        }
+
+        private void BeforeAccessNotification(TokenCacheNotificationArgs args) {
+            Load();
+        }
+
+        private void AfterAccessNotification(TokenCacheNotificationArgs args) {
+            if (HasStateChanged) {
+                Persist();
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/AzureActiveDirectory/MissingSettingsBanner.cs

@@ -0,0 +1,36 @@
+using System.Collections.Generic;
+using System.Web.Mvc;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+using Orchard.UI.Admin.Notification;
+using Orchard.UI.Notify;
+
+namespace Orchard.Azure.Authentication.Services.AzureActiveDirectory {
+    [OrchardFeature("Orchard.OpenId.AzureActiveDirectory")]
+    public class MissingSettingsBanner : INotificationProvider {
+        private readonly IOrchardServices _orchardServices;
+        private readonly UrlHelper _urlHelper;
+
+        public MissingSettingsBanner(IOrchardServices orchardServices, UrlHelper urlHelper)
+        {
+            _orchardServices = orchardServices;
+            _urlHelper = urlHelper;
+
+            T = NullLocalizer.Instance;
+        }
+
+        public Localizer T { get; set; }
+
+        public IEnumerable<NotifyEntry> GetNotifications() {
+            var workContext = _orchardServices.WorkContext;
+            var azureSettings = workContext.CurrentSite.As<AzureActiveDirectorySettingsPart>();
+
+            if (azureSettings == null || !azureSettings.IsValid) {
+                var url = _urlHelper.Action("OpenId", "Admin", new { Area = "Settings" });
+                yield return new NotifyEntry { Message = T("The <a href=\"{0}\">Azure AD Authentication settings</a> need to be configured.", url), Type = NotifyType.Warning };
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/Facebook/MissingSettingsBanner.cs

@@ -0,0 +1,36 @@
+using System.Collections.Generic;
+using System.Web.Mvc;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+using Orchard.UI.Admin.Notification;
+using Orchard.UI.Notify;
+
+namespace Orchard.Azure.Authentication.Services.Facebook {
+    [OrchardFeature("Orchard.OpenId.Facebook")]
+    public class MissingSettingsBanner : INotificationProvider {
+        private readonly IOrchardServices _orchardServices;
+        private readonly UrlHelper _urlHelper;
+
+        public MissingSettingsBanner(IOrchardServices orchardServices, UrlHelper urlHelper)
+        {
+            _orchardServices = orchardServices;
+            _urlHelper = urlHelper;
+
+            T = NullLocalizer.Instance;
+        }
+
+        public Localizer T { get; set; }
+
+        public IEnumerable<NotifyEntry> GetNotifications() {
+            var workContext = _orchardServices.WorkContext;
+            var settings = workContext.CurrentSite.As<FacebookSettingsPart>();
+
+            if (settings == null || !settings.IsValid) {
+                var url = _urlHelper.Action("OpenId", "Admin", new { Area = "Settings" });
+                yield return new NotifyEntry { Message = T("The <a href=\"{0}\">Facebook settings</a> need to be configured.", url), Type = NotifyType.Warning };
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/Google/MissingSettingsBanner.cs

@@ -0,0 +1,36 @@
+using System.Collections.Generic;
+using System.Web.Mvc;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+using Orchard.UI.Admin.Notification;
+using Orchard.UI.Notify;
+
+namespace Orchard.Azure.Authentication.Services.Google {
+    [OrchardFeature("Orchard.OpenId.Google")]
+    public class MissingSettingsBanner : INotificationProvider {
+        private readonly IOrchardServices _orchardServices;
+        private readonly UrlHelper _urlHelper;
+
+        public MissingSettingsBanner(IOrchardServices orchardServices, UrlHelper urlHelper)
+        {
+            _orchardServices = orchardServices;
+            _urlHelper = urlHelper;
+
+            T = NullLocalizer.Instance;
+        }
+
+        public Localizer T { get; set; }
+
+        public IEnumerable<NotifyEntry> GetNotifications() {
+            var workContext = _orchardServices.WorkContext;
+            var settings = workContext.CurrentSite.As<GoogleSettingsPart>();
+
+            if (settings == null || !settings.IsValid) {
+                var url = _urlHelper.Action("OpenId", "Admin", new { Area = "Settings" });
+                yield return new NotifyEntry { Message = T("The <a href=\"{0}\">Google settings</a> need to be configured.", url), Type = NotifyType.Warning };
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/IOpenIdProvider.cs

@@ -0,0 +1,8 @@
+namespace Orchard.OpenId.Services {
+    public interface IOpenIdProvider : IDependency {
+        string AuthenticationType { get; }
+        string DisplayName { get; }
+        bool IsValid { get; }
+        string Name { get; }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/OpenIdAuthenticationService.cs

@@ -0,0 +1,117 @@
+using System.Collections.Generic;
+using System.Linq;
+using System.Web;
+using System.Web.Security;
+using Orchard.Environment.Configuration;
+using Orchard.Environment.Extensions;
+using Orchard.Mvc;
+using Orchard.Security;
+using Orchard.Security.Providers;
+using Orchard.Services;
+
+namespace Orchard.OpenId.Services {
+    [OrchardFeature("Orchard.OpenId")]
+    public class OpenIdAuthenticationService : IAuthenticationService {
+        private readonly ShellSettings _settings;
+        private readonly IClock _clock;
+        private readonly IMembershipService _membershipService;
+        private readonly ISslSettingsProvider _sslSettingsProvider;
+        private readonly IHttpContextAccessor _httpContextAccessor;
+        private readonly IMembershipValidationService _membershipValidationService;
+        private readonly IEnumerable<IOpenIdProvider> _openIdProviders;
+
+        private IUser _localAuthenticationUser;
+
+        IAuthenticationService _fallbackAuthenticationService;
+        private IAuthenticationService FallbackAuthenticationService {
+            get {
+                if (_fallbackAuthenticationService == null)
+                    _fallbackAuthenticationService = new FormsAuthenticationService(_settings, _clock, _membershipService, _httpContextAccessor, _sslSettingsProvider, _membershipValidationService);
+
+                return _fallbackAuthenticationService;
+            }
+        }
+
+        public OpenIdAuthenticationService(
+            ShellSettings settings,
+            IClock clock,
+            IMembershipService membershipService,
+            ISslSettingsProvider sslSettingsProvider,
+            IHttpContextAccessor httpContextAccessor,
+            IMembershipValidationService membershipValidationService,
+            IEnumerable<IOpenIdProvider> openIdProviders) {
+
+            _httpContextAccessor = httpContextAccessor;
+            _membershipService = membershipService;
+            _settings = settings;
+            _clock = clock;
+            _sslSettingsProvider = sslSettingsProvider;
+            _membershipValidationService = membershipValidationService;
+            _openIdProviders = openIdProviders;
+        }
+
+        public void SignIn(IUser user, bool createPersistentCookie) {
+            if (IsFallbackNeeded()) {
+                FallbackAuthenticationService.SignIn(user, createPersistentCookie);
+            }
+        }
+
+        public void SignOut() {
+            if (IsFallbackNeeded()) {
+                FallbackAuthenticationService.SignOut();
+            }
+        }
+
+        public void SetAuthenticatedUserForRequest(IUser user) {
+            if (IsFallbackNeeded()) {
+                FallbackAuthenticationService.SetAuthenticatedUserForRequest(user);
+            }
+        }
+
+        public IUser GetAuthenticatedUser() {
+            if (IsFallbackNeeded()) {
+                return FallbackAuthenticationService.GetAuthenticatedUser();
+            }
+
+            var user = _httpContextAccessor.Current().GetOwinContext().Authentication.User;
+
+            if (!user.Identity.IsAuthenticated) {
+                return null;
+            }
+
+            // In memory caching of sorts since this method gets called many times per request
+            if (_localAuthenticationUser != null) {
+                return _localAuthenticationUser;
+            }
+
+            var userName = user.Identity.Name.Trim();
+
+            //Get the local user, if local user account doesn't exist, create it 
+            var localUser =
+                _membershipService.GetUser(userName) ??
+                _membershipService.CreateUser(new CreateUserParams(
+                    userName, Membership.GeneratePassword(16, 1), userName, string.Empty, string.Empty, true
+                ));
+
+            return _localAuthenticationUser = localUser;
+        }
+
+        private bool IsLocalUser() {
+            var anyClaim = _httpContextAccessor.Current().GetOwinContext().Authentication.User.Claims.FirstOrDefault();
+
+            if (anyClaim == null || anyClaim.Issuer == Constants.General.LocalIssuer || anyClaim.Issuer == Constants.General.FormsIssuer) {
+                return true;
+            }
+
+            return false;
+        }
+
+        private bool IsAnyProviderSettingsValid() {
+            return _openIdProviders.Any(provider => provider.IsValid);
+        }
+
+        private bool IsFallbackNeeded() {
+            return IsLocalUser() || !IsAnyProviderSettingsValid();
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Services/Twitter/MissingSettingsBanner.cs

@@ -0,0 +1,36 @@
+using System.Collections.Generic;
+using System.Web.Mvc;
+using Orchard.ContentManagement;
+using Orchard.Environment.Extensions;
+using Orchard.Localization;
+using Orchard.OpenId.Models;
+using Orchard.UI.Admin.Notification;
+using Orchard.UI.Notify;
+
+namespace Orchard.Azure.Authentication.Services.Twitter {
+    [OrchardFeature("Orchard.OpenId.Twitter")]
+    public class MissingSettingsBanner : INotificationProvider {
+        private readonly IOrchardServices _orchardServices;
+        private readonly UrlHelper _urlHelper;
+
+        public MissingSettingsBanner(IOrchardServices orchardServices, UrlHelper urlHelper)
+        {
+            _orchardServices = orchardServices;
+            _urlHelper = urlHelper;
+
+            T = NullLocalizer.Instance;
+        }
+
+        public Localizer T { get; set; }
+
+        public IEnumerable<NotifyEntry> GetNotifications() {
+            var workContext = _orchardServices.WorkContext;
+            var settings = workContext.CurrentSite.As<TwitterSettingsPart>();
+
+            if (settings == null || !settings.IsValid) {
+                var url = _urlHelper.Action("OpenId", "Admin", new { Area = "Settings" });
+                yield return new NotifyEntry { Message = T("The <a href=\"{0}\">Twitter settings</a> need to be configured.", url), Type = NotifyType.Warning };
+            }
+        }
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Styles/Web.config

@@ -0,0 +1,12 @@
+<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+    <system.webServer>
+        <staticContent>
+            <clientCache cacheControlMode="UseMaxAge" cacheControlMaxAge="7.00:00:00" />
+        </staticContent>
+        <handlers accessPolicy="Script,Read">
+            <!-- For any request to a file exists on disk, return it via native http module. AccessPolicy="Script" above is to allow for a managed 404 page. -->
+            <add name="StaticFile" path="*" verb="*" modules="StaticFileModule" preCondition="integratedMode" resourceType="File" requireAccess="Read" />
+        </handlers>
+    </system.webServer>
+</configuration>

src/Orchard.Web/Modules/Orchard.OpenId/Styles/twitter-admin.css

@@ -0,0 +1,26 @@
+.coll-exp-control {
+    width: 100%;
+    cursor: pointer;
+}
+
+.coll-exp-button {
+    font-weight: bold;
+    font-weight: bold;
+    padding: 3px;
+    background: white;
+    color: black;
+    border-radius: 50%;
+    width: 24px;
+    height: 24px;
+}
+
+.coll-exp-button:hover {
+    background: #f0f0f0;
+    color: black;
+}
+
+.coll-exp-area {
+    display: none;
+    background: #f9f9f9;
+    padding: 3px 7px;
+}

src/Orchard.Web/Modules/Orchard.OpenId/Views/Account/AccessDenied.cshtml

@@ -0,0 +1,7 @@
+@model dynamic
+<section class="content-header">
+    <h1>@Html.TitleForPage(T("Access Denied").ToString())</h1>
+</section>
+<section class="content">
+    <p>@T("You do not have permission to complete your request.")</p>
+</section>

src/Orchard.Web/Modules/Orchard.OpenId/Views/Account/Error.cshtml

@@ -0,0 +1 @@
+@T("Oops, Something went wrong with your authentication!")

src/Orchard.Web/Modules/Orchard.OpenId/Views/Account/Logon.cshtml

@@ -0,0 +1,39 @@
+@model IEnumerable<IOpenIdProvider>
+@using Orchard.OpenId.Services
+@using Orchard.Utility.Extensions
+
+<h1 class="title">Logon</h1>
+<hr />
+<h5></h5>
+@using (Html.BeginFormAntiForgeryPost(Url.Action("LogOn", "Account", new { Area = "Orchard.Users", ReturnUrl = Request.QueryString["ReturnUrl"] }))) {
+    <fieldset class="login-form group">
+        <legend>@T("Account Information")</legend>
+        <ol>
+            <li>
+                <label for="username-email">@T("Username")</label>
+                @Html.TextBox("userNameOrEmail", "", new { id = "username-email", autofocus = "autofocus" })
+                @Html.ValidationMessage("userNameOrEmail")
+            </li>
+            <li>
+                <label for="password">@T("Password")</label>
+                @Html.Password("password")
+                @Html.ValidationMessage("password")
+            </li>
+            <li>
+                @Html.CheckBox("rememberMe", new { id = "remember-me" })<label class="forcheckbox" for="remember-me">@T("Remember Me")</label>
+            </li>
+        </ol>
+        <button class="primaryAction" type="submit">@T("Sign In")</button>
+    </fieldset>
+}
+<hr />
+<h5>Or choose your OpenId account provider</h5>
+<br />
+
+@foreach (var provider in Model) {
+    if (provider.IsValid) {
+        <a class="button @provider.Name.HtmlClassify()" href="@Url.Action("Challenge", "Account", new { Area = "Orchard.OpenId", openIdProvider = provider.AuthenticationType })">
+            @provider.DisplayName
+        </a>
+    }
+}

src/Orchard.Web/Modules/Orchard.OpenId/Views/EditorTemplates/Parts.ActiveDirectoryFederationServicesSettings.cshtml

@@ -0,0 +1,20 @@
+@model Orchard.OpenId.Models.ActiveDirectoryFederationServicesSettingsPart
+@using Orchard.OpenId
+
+<h2>Active Directory Federation Services Settings</h2>
+<fieldset>
+    @Html.LabelFor(m => m.ClientId, T("Client Id"))
+    @Html.TextBoxFor(m => m.ClientId, new { @class = "text large" })
+    <span class="hint">@T("ADFS's Client Id obtained from your ADFS configuration (e.g. {0})", Constants.DefaultAdfsClientId)</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.MetadataAddress, T("Metadata Address"))
+    @Html.TextBoxFor(m => m.MetadataAddress, new { @class = "text large" })
+    <span class="hint">@T("ADFS's Metadata Address url obtained from your ADFS configuration (e.g. {0})", Constants.DefaultAdfsMetadataAddress)</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.PostLogoutRedirectUri, T("Post Logout Redirect Uri"))
+    @Html.TextBoxFor(m => m.PostLogoutRedirectUri, new { @class = "text large" })
+    <span class="hint">@T("ADFS's Post Logout Redirect url obtained from your ADFS configuration (e.g. {0})", Constants.DefaultAdfsPostLogoutRedirectUri)</span>
+</fieldset>
+<hr />

src/Orchard.Web/Modules/Orchard.OpenId/Views/EditorTemplates/Parts.AzureActiveDirectorySettings.cshtml

@@ -0,0 +1,63 @@
+@model Orchard.OpenId.Models.AzureActiveDirectorySettingsPart
+
+<h2>Azure Active Directory Settings</h2>
+<fieldset>
+    @Html.LabelFor(m => m.Tenant, T("Tenant"))
+    @Html.TextBoxFor(m => m.Tenant, new { @class = "text large" })
+    <span class="hint">@T("Azure Active Directory tenant (e.g. yoursite.onmicrosoft.com).")</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.ADInstance, T("Active Directory Instance"))
+    @Html.TextBoxFor(m => m.ADInstance, new { @class = "text large" })
+    <span class="hint">@T("Default instance is https://login.microsoftonline.com/{your-tenant-name}")</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.ClientId, T("App ID"))
+    @Html.TextBoxFor(m => m.ClientId, new { @class = "text large" })
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.AppName, T("App Name"))
+    @Html.TextBoxFor(m => m.AppName, new { @class = "text large" })
+    <span class="hint">@T("The application name you wish to give active directory login rights to.")</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.LogoutRedirectUri, T("Logout Redirect"))
+    @Html.TextBoxFor(m => m.LogoutRedirectUri, new { @class = "text large" })
+    <span class="hint">@T("Redirect url after azure logout, default is http://localhost:30321/OrchardLocal/")</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.ServiceResourceID, T("Service Resource ID"))
+    @Html.TextAreaFor(m => m.ServiceResourceID, new { @class = "text large" })
+    <span class="hint">
+        @T(@"If you have a single 'Service Resource ID' just write it down directly.
+             If you have multiple resources, enter each resource id on its own line, using key=value pairs.
+             Example: service1=https://yoursite.onmicrosoft.com/some-guid-for-service1")
+    </span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.AppKey, T("App Key"))
+    @Html.TextBoxFor(m => m.AppKey, new { @class = "text large" })
+</fieldset>
+<fieldset>
+    @Html.CheckBoxFor(m => m.BearerAuthEnabled)
+    <label class="forcheckbox" for="AzureActiveDirectorySettings_BearerAuthEnabled">@T("Enable Bearer Token Authentication")</label>
+</fieldset>
+<fieldset>
+    @Html.CheckBoxFor(m => m.SSLEnabled)
+    <label class="forcheckbox" for="AzureActiveDirectorySettings_SSLEnabled">@T("Use SSL Protocol for valid audience")</label>
+</fieldset>
+<fieldset>
+    @Html.CheckBoxFor(m => m.AzureWebSiteProtectionEnabled)
+    <label class="forcheckbox" for="AzureActiveDirectorySettings_AzureWebSiteProtectionEnabled">@T("Enable Machine Key Data Protection for Azure Web Site")</label>
+</fieldset>
+<fieldset>
+    @Html.CheckBoxFor(m => m.UseAzureGraphApi)
+    <label class="forcheckbox" for="AzureActiveDirectorySettings_UseAzureGraphApi">@T("Enable Graph API")</label>
+    <span class="hint">@T("Check this box to enable syncing Orchard Role membership to Azure Graph API Group Membership.  This module will not create new Orchard Roles for you, but it will sync up user membership of existing Orchard Roles with AD Group membership for Role names that match a group name")</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.GraphApiUrl, T("Graph API URL"))
+    @Html.TextBoxFor(m => m.GraphApiUrl, new { @class = "text large" })
+    <span class="hint">@T("Typically https://graph.windows.net")</span>
+</fieldset>
+<hr />

src/Orchard.Web/Modules/Orchard.OpenId/Views/EditorTemplates/Parts.FacebookSettings.cshtml

@@ -0,0 +1,15 @@
+@model Orchard.OpenId.Models.FacebookSettingsPart
+@using Orchard.OpenId
+
+<h2>Facebook Settings</h2>
+<fieldset>
+    @Html.LabelFor(m => m.AppId, T("App Id"))
+    @Html.TextBoxFor(m => m.AppId, new { @class = "text large" })
+    <span class="hint">@T("Facebook's App Id obtained from your facebook developer dashboard (e.g. {0})", Constants.DefaultFacebookAppId)</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.AppSecret, T("App Secret"))
+    @Html.TextBoxFor(m => m.AppSecret, new { @class = "text large" })
+    <span class="hint">@T("Facebook's App Secret obtained from your facebook developer dashboard (e.g. {0})", Constants.DefaultFacebookAppSecret)</span>
+</fieldset>
+<hr />

src/Orchard.Web/Modules/Orchard.OpenId/Views/EditorTemplates/Parts.GoogleSettings.cshtml

@@ -0,0 +1,20 @@
+@model Orchard.OpenId.Models.GoogleSettingsPart
+@using Orchard.OpenId
+
+<h2>Google Settings</h2>
+<fieldset>
+    @Html.LabelFor(m => m.ClientId, T("Client Id"))
+    @Html.TextBoxFor(m => m.ClientId, new { @class = "text large" })
+    <span class="hint">@T("Google's Client Id obtained from your google dashboard (e.g. {0})", Constants.DefaultGoogleClientId)</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.ClientSecret, T("Client Secret"))
+    @Html.TextBoxFor(m => m.ClientSecret, new { @class = "text large" })
+    <span class="hint">@T("Google's Client Secret obtained from your google dashboard (e.g. {0})", Constants.DefaultGoogleClientSecret)</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.CallbackPath, T("Callback Path"))
+    @Html.TextBoxFor(m => m.CallbackPath, new { @class = "text large" })
+    <span class="hint">@T("Google's Callback Path obtained from your google dashboard (case sensitive). Recommended: {0}", Constants.LogonCallbackUrl)</span>
+</fieldset>
+<hr />

src/Orchard.Web/Modules/Orchard.OpenId/Views/EditorTemplates/Parts.TwitterSettings.cshtml

@@ -0,0 +1,48 @@
+@model Orchard.OpenId.Models.TwitterSettingsPart
+@using Orchard.OpenId;
+@{
+    Style.Include("TwitterAdmin").AtHead();
+
+    Script.Require("jQuery");
+    Script.Require("TwitterAdmin").AtFoot();
+}
+
+<h2>@T("Twitter Settings")</h2>
+<fieldset>
+    @Html.LabelFor(m => m.ConsumerKey, T("Consumer Key"))
+    @Html.TextBoxFor(m => m.ConsumerKey, new { @class = "text large" })
+    <span class="hint">@T("Twitter's Consumer Key obtained from your twitter dashboard (e.g. {0})", Constants.DefaultTwitterConsumerKey)</span>
+</fieldset>
+<fieldset>
+    @Html.LabelFor(m => m.ConsumerSecret, T("Consumer Secret"))
+    @Html.TextBoxFor(m => m.ConsumerSecret, new { @class = "text large" })
+    <span class="hint">@T("Twitter's Consumer Secret obtained from your twitter dashboard (e.g. {0})", Constants.DefaultTwitterConsumerSecret)</span>
+</fieldset>
+<fieldset>
+    <h6 id="colExpControl" class="coll-exp-control" title="@T("Click to toggle view")">
+        @T("Certificate Subject Key Identifiers")
+        <button id="colExpButton" type="button" class="coll-exp-button">+</button>
+    </h6>
+    <div id="colExpArea" class="coll-exp-area">
+        <span class="hint">@T("These settings rarely change, it is recommended to keep default values")</span>
+
+        @Html.LabelFor(m => m.VeriSignClass3SecureServerCA_G2, T("VeriSign Class3 Secure Server CA - G2"))
+        @Html.TextBoxFor(m => m.VeriSignClass3SecureServerCA_G2, new { @class = "text large" })
+
+        @Html.LabelFor(m => m.VeriSignClass3SecureServerCA_G3, T("VeriSign Class3 Secure Server CA - G3"))
+        @Html.TextBoxFor(m => m.VeriSignClass3SecureServerCA_G3, new { @class = "text large" })
+
+        @Html.LabelFor(m => m.VeriSignClass3PublicPrimaryCA_G5, T("VeriSign Class3 Secure Server CA - G5"))
+        @Html.TextBoxFor(m => m.VeriSignClass3PublicPrimaryCA_G5, new { @class = "text large" })
+
+        @Html.LabelFor(m => m.SymantecClass3SecureServerCA_G4, T("Symantec Class3 Secure Server CA - G4"))
+        @Html.TextBoxFor(m => m.SymantecClass3SecureServerCA_G4, new { @class = "text large" })
+
+        @Html.LabelFor(m => m.DigiCertSHA2HighAssuranceServerCA, T("DigiCert SHA2 High Assurance Server CA"))
+        @Html.TextBoxFor(m => m.DigiCertSHA2HighAssuranceServerCA, new { @class = "text large" })
+
+        @Html.LabelFor(m => m.DigiCertHighAssuranceEVRootCA, T("DigiCert High Assurance EV Root CA"))
+        @Html.TextBoxFor(m => m.DigiCertHighAssuranceEVRootCA, new { @class = "text large" })
+    </div>
+</fieldset>
+<hr />

src/Orchard.Web/Modules/Orchard.OpenId/Views/User.cshtml

@@ -0,0 +1,16 @@
+<div class="user-display">
+    @if (WorkContext.CurrentUser != null) {
+        <span class="user-actions welcome">
+            @T("Welcome, <strong>{0}</strong>!", Html.ItemDisplayText(WorkContext.CurrentUser))
+        </span>
+        <span class="user-actions">
+            @Html.ActionLink(T("Sign Out").ToString(), "LogOff", new { Controller = "Account", Area = "Orchard.Users", ReturnUrl = Context.Request.RawUrl }, new { rel = "nofollow" })
+            @if (AuthorizedFor(Orchard.Security.StandardPermissions.AccessAdminPanel)) {
+                @Html.ActionLink(T("Dashboard").ToString(), "Index", new { Area = "Dashboard", Controller = "Admin" })
+            }
+        </span>
+    }
+    else {
+        <span class="user-actions">@Html.ActionLink(T("Sign In").ToString(), "LogOn", new { Controller = "Account", Area = "Orchard.Users", ReturnUrl = (Request.QueryString["ReturnUrl"] ?? Request.RawUrl) }, new { rel = "nofollow" })</span>
+    }
+</div>

src/Orchard.Web/Modules/Orchard.OpenId/Web.config

@@ -0,0 +1,110 @@
+<?xml version="1.0" encoding="utf-8"?>
+<configuration>
+    <configSections>
+        <sectionGroup name="system.web.webPages.razor" type="System.Web.WebPages.Razor.Configuration.RazorWebSectionGroup, System.Web.WebPages.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35">
+            <section name="host" type="System.Web.WebPages.Razor.Configuration.HostSection, System.Web.WebPages.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" />
+            <section name="pages" type="System.Web.WebPages.Razor.Configuration.RazorPagesSection, System.Web.WebPages.Razor, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31BF3856AD364E35" requirePermission="false" />
+        </sectionGroup>
+    </configSections>
+    <system.web.webPages.razor>
+        <host factoryType="System.Web.Mvc.MvcWebRazorHostFactory, System.Web.Mvc, Version=5.2.3, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
+        <pages pageBaseType="Orchard.Mvc.ViewEngines.Razor.WebViewPage">
+            <namespaces>
+                <add namespace="System.Web.Mvc" />
+                <add namespace="System.Web.Mvc.Ajax" />
+                <add namespace="System.Web.Mvc.Html" />
+                <add namespace="System.Web.Routing" />
+                <add namespace="System.Web.WebPages" />
+                <add namespace="System.Linq" />
+                <add namespace="System.Collections.Generic" />
+                <add namespace="Orchard.Mvc.Html" />
+            </namespaces>
+        </pages>
+    </system.web.webPages.razor>
+    <!--
+    For a description of web.config changes see http://go.microsoft.com/fwlink/?LinkId=235367.
+
+    The following attributes can be set on the <httpRuntime> tag.
+      <system.Web>
+        <httpRuntime targetFramework="4.5.2" />
+      </system.Web>
+  -->
+    <system.web>
+        <compilation targetFramework="4.5.2">
+            <assemblies>
+                <add assembly="System.Core, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
+                <add assembly="System.Web.Abstractions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
+                <add assembly="System.Web.Routing, Version=4.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
+                <add assembly="System.Data.Linq, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
+                <add assembly="System.Web.Mvc, Version=5.2.3, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
+                <add assembly="System.Web.WebPages, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35" />
+                <add assembly="Orchard.Framework,Culture=neutral, PublicKeyToken=null" />
+                <add assembly="Orchard.Core,Culture=neutral, PublicKeyToken=null" />
+            </assemblies>
+        </compilation>
+    </system.web>
+    <runtime>
+        <assemblyBinding xmlns="urn:schemas-microsoft-com:asm.v1">
+            <dependentAssembly>
+                <assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30AD4FE6B2A6AEED" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="NHibernate" publicKeyToken="AA95F207798DFDB4" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-4.0.0.4000" newVersion="4.0.0.4000" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Iesi.Collections" publicKeyToken="AA95F207798DFDB4" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-4.0.0.0" newVersion="4.0.0.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Autofac" publicKeyToken="17863AF14B0044DA" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-3.5.0.0" newVersion="3.5.0.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Autofac" publicKeyToken="17863af14b0044da" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-3.5.0.0" newVersion="3.5.0.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="NHibernate" publicKeyToken="aa95f207798dfdb4" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-4.0.0.4000" newVersion="4.0.0.4000" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Iesi.Collections" publicKeyToken="aa95f207798dfdb4" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-4.0.0.0" newVersion="4.0.0.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Microsoft.Data.Services.Client" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-5.6.4.0" newVersion="5.6.4.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Microsoft.Data.Edm" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-5.6.4.0" newVersion="5.6.4.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Microsoft.Data.OData" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-5.6.4.0" newVersion="5.6.4.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="System.Web.Helpers" publicKeyToken="31bf3856ad364e35" />
+                <bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="System.Web.WebPages" publicKeyToken="31bf3856ad364e35" />
+                <bindingRedirect oldVersion="1.0.0.0-3.0.0.0" newVersion="3.0.0.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-3.0.1.0" newVersion="3.0.1.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="System.IdentityModel.Tokens.Jwt" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-4.0.20622.1351" newVersion="4.0.20622.1351" />
+            </dependentAssembly>
+            <dependentAssembly>
+                <assemblyIdentity name="Microsoft.IdentityModel.Protocol.Extensions" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+                <bindingRedirect oldVersion="0.0.0.0-1.0.2.33" newVersion="1.0.2.33" />
+            </dependentAssembly>
+        </assemblyBinding>
+    </runtime>
+</configuration>

src/Orchard.Web/Modules/Orchard.OpenId/packages.config

@@ -0,0 +1,29 @@
+<?xml version="1.0" encoding="utf-8"?>
+<packages>
+  <package id="Iesi.Collections" version="4.0.0.4000" targetFramework="net452" />
+  <package id="Microsoft.AspNet.Razor" version="3.2.3" targetFramework="net452" />
+  <package id="Microsoft.AspNet.WebPages" version="3.2.3" targetFramework="net452" />
+  <package id="Microsoft.Azure.ActiveDirectory.GraphClient" version="2.1.1" targetFramework="net452" />
+  <package id="Microsoft.Data.Edm" version="5.6.4" targetFramework="net452" />
+  <package id="Microsoft.Data.OData" version="5.6.4" targetFramework="net452" />
+  <package id="Microsoft.Data.Services.Client" version="5.6.4" targetFramework="net452" />
+  <package id="Microsoft.IdentityModel.Clients.ActiveDirectory" version="3.13.5" targetFramework="net452" />
+  <package id="Microsoft.IdentityModel.Protocol.Extensions" version="1.0.2.206221351" targetFramework="net452" />
+  <package id="Microsoft.Owin" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Host.SystemWeb" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security.ActiveDirectory" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security.Cookies" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security.Facebook" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security.Google" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security.Jwt" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security.OAuth" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security.OpenIdConnect" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Security.Twitter" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net452" />
+  <package id="Newtonsoft.Json" version="6.0.4" targetFramework="net452" />
+  <package id="NHibernate" version="4.0.4.4000" targetFramework="net452" />
+  <package id="Owin" version="1.0" targetFramework="net452" />
+  <package id="System.IdentityModel.Tokens.Jwt" version="4.0.2.206221351" targetFramework="net452" />
+  <package id="System.Spatial" version="5.6.4" targetFramework="net452" />
+</packages>

src/Orchard.Web/Modules/Orchard.OpenId/placement.info

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<Placement>
+  <Place Parts_ActiveDirectoryFederationServicesSettings_Edit="Content:after"/>
+  <Place Parts_AzureActiveDirectorySettings_Edit="Content:after"/>
+  <Place Parts_FacebookSettings_Edit="Content:after"/>
+  <Place Parts_GoogleSettings_Edit="Content:after"/>
+  <Place Parts_TwitterSettings_Edit="Content:after"/>
+</Placement>

src/Orchard.Web/Orchard.Web.csproj

@@ -58,12 +58,12 @@
       <HintPath>..\packages\log4net.2.0.3\lib\net40-full\log4net.dll</HintPath>
       <Private>True</Private>
     </Reference>
-    <Reference Include="Microsoft.Owin, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Owin.3.0.0\lib\net45\Microsoft.Owin.dll</HintPath>
+    <Reference Include="Microsoft.Owin, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Owin.3.0.1\lib\net45\Microsoft.Owin.dll</HintPath>
       <Private>True</Private>
     </Reference>
-    <Reference Include="Microsoft.Owin.Host.SystemWeb, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Owin.Host.SystemWeb.3.0.0\lib\net45\Microsoft.Owin.Host.SystemWeb.dll</HintPath>
+    <Reference Include="Microsoft.Owin.Host.SystemWeb, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Owin.Host.SystemWeb.3.0.1\lib\net45\Microsoft.Owin.Host.SystemWeb.dll</HintPath>
       <Private>True</Private>
     </Reference>
     <Reference Include="Microsoft.Web.Infrastructure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">

src/Orchard.Web/Web.config

@@ -58,7 +58,7 @@
                 <add assembly="System.Data.Linq, Version=4.0.0.0, Culture=neutral, PublicKeyToken=B77A5C561934E089" />
                 <add assembly="System.Data.Entity, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
                 <add assembly="System.Data.Entity.Design, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
-                <add assembly="Microsoft.Owin.Host.SystemWeb, Version=3.0.0.0" />
+                <add assembly="Microsoft.Owin.Host.SystemWeb, Version=3.0.1.0" />
                 <add assembly="System.Data.Services.Client, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
                 <add assembly="System.Numerics, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
                 <add assembly="System.Transactions, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" />
@@ -233,6 +233,26 @@
                 <assemblyIdentity name="Newtonsoft.Json" publicKeyToken="30ad4fe6b2a6aeed" culture="neutral" />
                 <bindingRedirect oldVersion="0.0.0.0-7.0.0.0" newVersion="7.0.0.0" />
             </dependentAssembly>
+            <dependentAssembly>
+              <assemblyIdentity name="Microsoft.Owin" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+              <bindingRedirect oldVersion="0.0.0.0-3.0.1.0" newVersion="3.0.1.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+              <assemblyIdentity name="Microsoft.Owin.Host.SystemWeb" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+              <bindingRedirect oldVersion="0.0.0.0-3.0.1.0" newVersion="3.0.1.0" />
+            </dependentAssembly>
+            <dependentAssembly>
+              <assemblyIdentity name="Microsoft.IdentityModel.Protocol.Extensions" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+              <bindingRedirect oldVersion="0.0.0.0-1.0.2.33" newVersion="1.0.2.33" />
+            </dependentAssembly>
+            <dependentAssembly>
+              <assemblyIdentity name="System.IdentityModel.Tokens.Jwt" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+              <bindingRedirect oldVersion="0.0.0.0-5.0.0.0" newVersion="4.0.20622.1351" />
+            </dependentAssembly>
+            <dependentAssembly>
+              <assemblyIdentity name="Microsoft.IdentityModel.Protocol.Extensions" publicKeyToken="31bf3856ad364e35" culture="neutral" />
+              <bindingRedirect oldVersion="0.0.0.0-1.0.2.33" newVersion="1.0.2.33" />
+            </dependentAssembly>
         </assemblyBinding>
     </runtime>
 </configuration>

src/Orchard.Web/packages.config

@@ -5,8 +5,8 @@
   <package id="Microsoft.AspNet.Mvc" version="5.2.3" targetFramework="net452" />
   <package id="Microsoft.AspNet.Razor" version="3.2.3" targetFramework="net452" />
   <package id="Microsoft.AspNet.WebPages" version="3.2.3" targetFramework="net452" />
-  <package id="Microsoft.Owin" version="3.0.0" targetFramework="net452" />
-  <package id="Microsoft.Owin.Host.SystemWeb" version="3.0.0" targetFramework="net452" />
+  <package id="Microsoft.Owin" version="3.0.1" targetFramework="net452" />
+  <package id="Microsoft.Owin.Host.SystemWeb" version="3.0.1" targetFramework="net452" />
   <package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net452" />
   <package id="MySql.Data" version="6.7.9" targetFramework="net452" />
   <package id="Newtonsoft.Json" version="7.0.1" targetFramework="net452" />

src/Orchard.sln

@@ -278,6 +278,8 @@ Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Orchard.Resources", "Orchar
 EndProject
 Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Orchard.Azure.Tests", "Orchard.Azure.Tests\Orchard.Azure.Tests.csproj", "{1CC62F45-E6FF-43D5-84BF-509A1085D994}"
 EndProject
+Project("{FAE04EC0-301F-11D3-BF4B-00C04F79EFBC}") = "Orchard.OpenId", "Orchard.Web\Modules\Orchard.OpenId\Orchard.OpenId.csproj", "{42E217C1-E163-4B6B-9E8F-42BEE21B6896}"
+EndProject
 Global
 	GlobalSection(SolutionConfigurationPlatforms) = preSolution
 		CodeCoverage|Any CPU = CodeCoverage|Any CPU
@@ -1114,6 +1116,13 @@ Global
 		{1CC62F45-E6FF-43D5-84BF-509A1085D994}.FxCop|Any CPU.Build.0 = Release|Any CPU
 		{1CC62F45-E6FF-43D5-84BF-509A1085D994}.Release|Any CPU.ActiveCfg = Release|Any CPU
 		{1CC62F45-E6FF-43D5-84BF-509A1085D994}.Release|Any CPU.Build.0 = Release|Any CPU
+		{42E217C1-E163-4B6B-9E8F-42BEE21B6896}.CodeCoverage|Any CPU.ActiveCfg = Release|Any CPU
+		{42E217C1-E163-4B6B-9E8F-42BEE21B6896}.Coverage|Any CPU.ActiveCfg = Release|Any CPU
+		{42E217C1-E163-4B6B-9E8F-42BEE21B6896}.Debug|Any CPU.ActiveCfg = Debug|Any CPU
+		{42E217C1-E163-4B6B-9E8F-42BEE21B6896}.Debug|Any CPU.Build.0 = Debug|Any CPU
+		{42E217C1-E163-4B6B-9E8F-42BEE21B6896}.FxCop|Any CPU.ActiveCfg = Release|Any CPU
+		{42E217C1-E163-4B6B-9E8F-42BEE21B6896}.Release|Any CPU.ActiveCfg = Release|Any CPU
+		{42E217C1-E163-4B6B-9E8F-42BEE21B6896}.Release|Any CPU.Build.0 = Release|Any CPU
 	EndGlobalSection
 	GlobalSection(SolutionProperties) = preSolution
 		HideSolutionNode = FALSE
@@ -1202,6 +1211,7 @@ Global
 		{98251EAE-A41B-47B2-AA91-E28B8482DA70} = {E9C9F120-07BA-4DFB-B9C3-3AFB9D44C9D5}
 		{D4E8F7C8-2DB2-4C50-A422-DA1DF1E3CC73} = {E9C9F120-07BA-4DFB-B9C3-3AFB9D44C9D5}
 		{1CC62F45-E6FF-43D5-84BF-509A1085D994} = {74E681ED-FECC-4034-B9BD-01B0BB1BDECA}
+		{42E217C1-E163-4B6B-9E8F-42BEE21B6896} = {E9C9F120-07BA-4DFB-B9C3-3AFB9D44C9D5}
 	EndGlobalSection
 	GlobalSection(ExtensibilityGlobals) = postSolution
 		EnterpriseLibraryConfigurationToolBinariesPath = packages\TransientFaultHandling.Core.5.1.1209.1\lib\NET4

src/Orchard/Orchard.Framework.csproj

@@ -84,8 +84,8 @@
       <Private>True</Private>
     </Reference>
     <Reference Include="Microsoft.CSharp" />
-    <Reference Include="Microsoft.Owin, Version=3.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
-      <HintPath>..\packages\Microsoft.Owin.3.0.0\lib\net45\Microsoft.Owin.dll</HintPath>
+    <Reference Include="Microsoft.Owin, Version=3.0.1.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">
+      <HintPath>..\packages\Microsoft.Owin.3.0.1\lib\net45\Microsoft.Owin.dll</HintPath>
       <Private>True</Private>
     </Reference>
     <Reference Include="Microsoft.Web.Infrastructure, Version=1.0.0.0, Culture=neutral, PublicKeyToken=31bf3856ad364e35, processorArchitecture=MSIL">

src/Orchard/packages.config

@@ -12,7 +12,7 @@
   <package id="Microsoft.AspNet.WebApi.Core" version="5.2.3" targetFramework="net452" />
   <package id="Microsoft.AspNet.WebApi.WebHost" version="5.2.3" targetFramework="net452" />
   <package id="Microsoft.AspNet.WebPages" version="3.2.3" targetFramework="net452" />
-  <package id="Microsoft.Owin" version="3.0.0" targetFramework="net452" />
+  <package id="Microsoft.Owin" version="3.0.1" targetFramework="net452" />
   <package id="Microsoft.Web.Infrastructure" version="1.0.0.0" targetFramework="net452" />
   <package id="Newtonsoft.Json" version="7.0.1" targetFramework="net452" />
   <package id="NHibernate" version="4.0.1.4000" targetFramework="net452" />