Questions tagged [openid]

OpenID is an open standard that describes how users can be authenticated in a decentralized manner. It allows the user to use an existing account to sign in to multiple websites, without needing to create new passwords.

Filter by
Sorted by
Tagged with
0 votes
1 answer
19 views

OpenIddict ClockSkew Configuration Not Working in Blazor Application(WASM)

I'm working on a abp project where I need to handle time incompatibility for users whose systems might have incorrect time settings. I've attempted to address this by configuring the ClockSkew in my ...
hossein safavi's user avatar
2 votes
0 answers
24 views
+50

Keycloak cookies not cleared after logout (kc-access, kc-access-1)

In my web application I have a logout mechanism that redirects to the Keycloak logout page /auth/realms/account-1/protocol/openid-connect/logout, which looks like this: Clicking the Logout button, a ...
Forivin's user avatar
  • 14.9k
0 votes
1 answer
67 views

Access_Tokens and Refresh_Tokens are generated even after expiry in IdentitiyServer4

We have a .NET Core application which uses IdentityServer4 for authentication and authorization. We are using azure active directory as IdentityProvider. We are using Redis for Caching. Access_token ...
Sandeep Manchukonda's user avatar
0 votes
1 answer
47 views

Only need ID token in oidc

I was using oidc middleware with the following config: oidcConfig = { issuer: configObj.oktaIssuer, client_id: global.configuration.oktaClientId, client_secret: global.configuration....
sunny's user avatar
  • 51
0 votes
1 answer
33 views

Error integrating Grafana to Okta with https protocol

I am trying to integrate OSS edition of Grafana to Okta OIDC using the following guide - https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/okta/ I am ...
Abhishek Anvekar's user avatar
0 votes
0 answers
47 views

Authentication with Identity, OpenID & JWT

Yeah, I know I'm asking for a lot. So basically what I want is this: I want to use the built-in (local) authentication routines using Microsoft Identity. I also want to authenticate against an OpenID-...
Rhywden's user avatar
  • 651
0 votes
0 answers
26 views

Opening the address in Angular so that nothing from the openId configuration is checked

I use openId for authentication in the angular project Now I have a page, for example the payment page, where the user comes to this part from another place And now it is like this that when he hits ...
davood beheshti's user avatar
-3 votes
0 answers
25 views

How to add custom authorities to the opaque token in Spring OAuth Server

I have a Spring OAuth server and a resource server that use opaque tokens as access token. I need to customize my introspection endpoint to include authorities in it My expectation is something from { ...
Dilz's user avatar
  • 1
0 votes
0 answers
25 views

redmine sso openId connect plugin

In our company we are using various apps we need to integrate apps with keycloak using sso. For redmine we have redmine openid connect plugin there we have list of feilds openId connect server url: ...
Praveen's user avatar
  • 11
0 votes
1 answer
42 views

How do i configure Google Identity Platform properly?

We want to let users login with Google in our web app. On our intranet we want to an OpenID provider to let users in into 3rd party apps, so they are automatically logged in. (SSO) 3rd party apps (...
Alain Vanderbroeck's user avatar
0 votes
1 answer
59 views

Keycloak OpenID Connect redirect_uri behaves inconsistently

I have Keycloak 22.0.5 deployed via docker on my local machine. I have a custom OpenID client configured with its access as follows: I don't want to use a password grant, I'm using pkce (...
Moder New's user avatar
  • 457
0 votes
0 answers
23 views

Unable to fetch connection list and profile information via linkedin API #linkedin

I have created a LinkedIn developers account, I wanted to fetch my profile data and the first-degree connection list. The official document says you have to add things in scope and I have to enable it ...
Sukrit Akhauri's user avatar
0 votes
1 answer
52 views

C#/.NET6: Build Policies for an API Controller from Scopes in an Access Token (OAuth/OpenID)

I have an API controller that I want consuming services to be authorized using a bearer token. The API endpoints should make sure that this service has the required scopes in its token - and that is ...
Aileron79's user avatar
  • 607
0 votes
1 answer
40 views

Authenticating with 3rd-party ID Token

If an ID token is used to identify and authenticate a person, then I can use ID tokens from 3rd-party OpenID Connect providers as a means to authenticate users to my API. Verification is obviously ...
Dave New's user avatar
  • 38.9k
0 votes
0 answers
34 views

Does OnlyOffice support OpenId

Does anyone know whether OnlyOffice supports or plans to support OpenID using Keycloak? I am asking this because in the OnlyOffice documents support only SAML SSO
prajwal's user avatar
0 votes
1 answer
15 views

Passing initial query params all the way, in Spring Security OpenID/SAML

I have an OpenID and SAML integration using Spring Security. I'm using the service initiated flow. I would like to pass any query parameter that is present in the initial URL, all the way to the final ...
PentaKon's user avatar
  • 4,279
0 votes
0 answers
42 views

Identify provider, identity management, authorization server

I am baffled while understanding OAuth 2.0, OpenID connect and other mechanisms for securing API's. I did online search, but results are varying with contradicting info. ==> Authentication server. =...
CuriousMind's user avatar
  • 8,387
1 vote
1 answer
60 views

MSAL.js and Axios - aquireTokenPopup interaction in progress

We're using axios request interceptors to aquire access token from MSAL.js and add it as a bearer token to all API requests to our backend: const acquireToken = async () => { const accounts = ...
andkorsh's user avatar
  • 705
0 votes
0 answers
46 views

Spring security and oauth2 Okta facing the invalid credential after logged in

I am trying to implement spring security on my reactive project with oauth2 from okta. And use openid too. But after logging in I get invalid credentials. see image In the Okta log, I successfully ...
Elvin dwi hendrawan's user avatar
0 votes
0 answers
47 views

Authentication failed: Include valid openId scopes like profile, email

I am building an app with Django and social-auth-app-django. I followed this tutorial. I created an app on LinkedIn for Developers, got the client_id and secret_key. I also made sure that the product ...
Kimonode's user avatar
  • 551
1 vote
0 answers
39 views

Does omniauth actually verify the token

I am currently trying to create a web app using Ruby on Rails and Keycloak as my authentication server. I would like also to use it as authorisation server with app roles. So I found that my best bet ...
Unik6065's user avatar
0 votes
0 answers
84 views

Kubernetes dashboard, Oauth2 proxy and keycloak rbac not working

Hi thank you for read this post, I hope you guys can help I have been configuring my k8s cluster to use RBAC, oauth2 proxy and Keycloak for authentication and authorization So here is what I have done ...
AVMP's user avatar
  • 51
0 votes
0 answers
24 views

How to configure username passed to app when using OpenID auth with OKTA

I've added an application to Okta using openid to provide authorisation to an apache-hosted site. It works but the REMOTE_USER header is set to [okta-ID]@[okta domain]. How can I get okta to pass the ...
Gaspode's user avatar
  • 149
2 votes
0 answers
324 views

Set up dovecot with keycloak

I would like to set up dovecot + roundcube with keycloak OPENID. To start I tried to configure only dovecot + keycloak and access it with thunderbird. My config file is: For the docker compose: ...
thibd's user avatar
  • 91
0 votes
1 answer
26 views

Random OWIN/OpenID behavior on ASP.NET 4.8 app startup - user sometimes is redirected to Azure automatically

Weird behavior. My application allows authentication via both internal accounts (using ASP.NET Identity) and Azure AD. The idea is that the login screen is shown and the user decides which way. But ...
gabpalves's user avatar
0 votes
0 answers
77 views

ASP.NET Core 6.0 - AWS Cognito - Identity - OpenId

Just want to post my solution in case it helps anyone else. I really wanted to get my login pages using the hosted UI from AWS Cognito, and I had a lot of issues trying to find a solution, so I just ...
Jay Peterson's user avatar
0 votes
0 answers
23 views

AD FS claims not provided to id_token

I'm stumped. Adding claims for my application in Application Groups is not working. I'm using Windows Server 2022. Application Groups -> TestApp TestApp - Web API -> Edit Issuance Transform ...
Тимофей Воронков's user avatar
0 votes
2 answers
87 views

Ideas/Suggestions implementing some OpenID authentication use-case involving android app and NFC

I am working on a project where we want to integrate some additional authentication mechanism that involves mobile devices and NFC tags. As a simplification for explaining the problem, one could ...
Dave's user avatar
  • 430
0 votes
1 answer
53 views

What is the url expected on the open id client.callback method? How do I get the tokens?

I'm trying to implement this flow: https://github.com/panva/node-openid-client#authorization-code-flow I've done the previous steps, but I don't understand what is the URL expected in the client....
Tyrannogina's user avatar
0 votes
0 answers
20 views

Keycloak : Customize claim "scope" to "scp"

I would like to modify the token claim scope to scp in keycloak. I tried with add mappers but it did not work. If you have an idea on that ? For information, I tried on keycloak version 22.0. Thanks ...
A.ZENAKHI's user avatar
0 votes
0 answers
41 views

Not able to use Authorize tag when calling Web API from Web App using OpenId

I am Authenticating from Azure AD in my Web App using OpenId and trying to Authorize in my Web API. I can access my WebAPI (.NET Framework 6.0) from Web App (.NET 4.8) without any issues. However when ...
Testor's user avatar
  • 1
-1 votes
1 answer
27 views

Is it possible to login an identity provider with a google account and register a different email account?

I’m looking for an open source identity provider which I can login via my google account. I.e. the idp can forward my authentication request to google. At the same time I can register a different ...
brian's user avatar
  • 263
0 votes
0 answers
90 views

Disable Standard Flow when creating new client in Keycloak with dynamic client registration

When creating new client in Keycloak using Dynamic Client Registration, a new client has a Standard Flow Enabled = true and Service Accounts Enabled = true. That means that a client has ...
Gefeon's user avatar
  • 1
0 votes
0 answers
64 views

Keycloak : Customize OpenID Endpoint /auth to /authorize

I looked for how to personalize keycloak endpoints /auth to /authorize, I searched at the keycloak UI level but without success. For information, the endpoint /auth is exposed here using this URL ...
A.ZENAKHI's user avatar
0 votes
1 answer
94 views

OpenID is just scope of OAuth?

I read a lot of answers about OpenID vs OAuth 2.0. Many bla bla like - OpenId about authentication, OAuth about Authorization. But what I see is - With OAuth to get username and email, you had to ask ...
FoxNet's user avatar
  • 528
0 votes
0 answers
109 views

Internal Server Error when authenticating with keycloak in xwiki

I'm getting an internal server error when trying to authenticate with keycloak in xwiki. Normally, I should be able to authenticate via Keycloak and then be able to use Xwiki. It says "Internal ...
kingnahui's user avatar
0 votes
2 answers
345 views

Could not upgrade OAuth 2 token. HTTP status for remote endpoint: {$a} in moodle 4.2

I used the custom service : OpenID for SSO. I configured the endpoints, user field mappings and rest of the things. But when I tried to login with the username and password it returns with the error ...
erenchristian's user avatar
0 votes
1 answer
167 views

No email for id token for B2C built in flow

I have B2C tenant for Azure Active Directory 1 (AD_1). I'd like to authenticate users from external AD_2. SignUp_SignIn flow was create for B2C tenant, all claims were selected. This flow related to ...
Anton Putau's user avatar
0 votes
0 answers
62 views

Retrieving OKTA Attributes in Spring Application Hosted on WebSphere with OIDC Configuration

I am having a spring boot based application which uses spring security and spring boot dependencies pom.xml <?xml version="1.0" encoding="UTF-8"?> <project xmlns="...
Ganesh Siripuram's user avatar
0 votes
0 answers
74 views

Flask app with Google login: Missing access token from userinfo_endpoint

I'm trying to implement Google login on a Flask web app with OAuth2.0/OpenID using the tutorial found here. Everything is working until the callback function, which looks like this: ...
David Tietje's user avatar
0 votes
0 answers
34 views

URL hostname (https://example.com) of the configured OIDCRedirectURI does not match the URL hostname of the URL being accessed (https://test.com):

I have created a docker image with the centos for the httpd and deployed the image to cloud foundry and CF deployed application is having the route as https://test.com and my redirect is https://...
korini bharathi's user avatar
0 votes
0 answers
131 views

Steam login issue using openId 2.0

Steam OpenID Signature Validation We are trying to implement the steam login in the spring boot project through this link. But we're in trouble, and we're going to use this method to get to the ...
Sonyas's user avatar
  • 1
1 vote
1 answer
136 views

Cannot get Federated Identities (OpenID Connect) and Amplify to Work Without Hosted UI

I have an Amplify app and using the Amplify "Auth" object with Cognito. My app works fine with standard Cognito user pools, but I'd like to also enable federated identities with a provider ...
Daniel Brown's user avatar
0 votes
0 answers
14 views

Automate login (OpenId Connect/oAuth authentication) from Web app

I have a login web page (https://aenormas.aenor.com) in which email and password are requested and what I would like to do is "automate" said login, let me explain. What I want to do is that ...
Iñaki L.'s user avatar
0 votes
1 answer
20 views

Xamarin.Forms and OpenID: fix response_type parameters

On Xamarin.Forms, using the Microsoft.Identity.Client nuGet package, i am trying to run the Oauth2.0 and openID flow. I started from this doc official page: https://learn.microsoft.com/en-us/azure/...
Emanuele Serrao's user avatar
2 votes
0 answers
282 views

Endless troubles with next-auth v4 and FacebookProvider

I've been trying to set up login with facebook feature with next-auth v4 and I keep running into some issues. Apart from the issues themselves what's really frustrating is the difficulty to reproduce ...
Koy's user avatar
  • 526
0 votes
1 answer
31 views

Force logout (finish session) using OAuth 2.0/OpenID

I have a single-page application (SPA) based on React, and I would like to implement OAuth 2.0 authentication, specifically using OpenID. This application runs on a device that may be shared by ...
caristu's user avatar
  • 115
0 votes
1 answer
218 views

JWTClaimsSet.Builder() and JSONObject - Object inside Verifiable Presentation JWT

I've to create a JWTClaim which has inside a property with a JSON: exampleClaimJson = { "nonce":"13234-3234345-34454", } In Java I'm building it like this: JSONObject ...
T. Rossi's user avatar
  • 475
0 votes
1 answer
83 views

Steam login using openID in JAVA

I implemented Steam login in Java language. However, if "is_valid:false" appears, I am worried that I cannot log in. I'm worried because it's random to log in even if I deliver accurate ...
Hyeok Geun's user avatar
0 votes
1 answer
155 views

Openiddict using EF Core and tables not being generated automatically like in EF6

We are porting our application over to EF Core and also updating our openiddict code to use EF Core as well. We have found that when a new database is setup, if the tables are missing, they are not ...
Gillardo's user avatar
  • 9,648

1
2 3 4 5
74