Questions tagged [saml]
Security Assertion Markup Language (SAML) is a standard for logging users into applications based on their sessions in another context.
3,556
questions
0
votes
0
answers
12
views
Webpack module federation and SAML SSO
Currently we have 2 applications that are build in different server groups. Each server group is protected with SAML SSO.
1-st application - is a parent that calls 2-nd application (which is ...
0
votes
0
answers
16
views
SSO Login to AWS Connect using Cognito
My site has login through AWS Cognito Identity. And then user login to AWS Connect in pop-up window. I need combine it to one login. Is it possible to make it without external services, using AWS only?...
1
vote
1
answer
14
views
There is no NameId in User Claims for performing Single Logout
When I tried to perform Single Logout from my IdP I received an error "NameId is required to do logout".
Here's my controller:
[HttpPost("logout")]
public Task<IActionResult> ...
0
votes
0
answers
17
views
Set-MsolDomainFederationSettings: Use NextSigningCertificate or SigningCertificate to update expiring cert?
When a cert is going to expire, I know you can use NextSigningCertificate to add a new cert that should be used when the current one expires.
I'm wondering is it also an option to use ...
0
votes
0
answers
10
views
Okta SAML2 Single Logout issue
ITfoxtec SAML 2.0 - Single Logout
I have Okta as IdP and one SP setup. SSO works great between them. Single Logout does not work for me. I got the 403 unauthorized error
SingleLogout ...
1
vote
0
answers
21
views
CAS Delegated authentication SAML/OIDC
I'm trying to test a POC with CAS Delegated Authentication PAC4J.
The target Authentication flow is the following:
Client requests access to SP (SAML client)
SP redirects to my CAS Server (SAML IDP)
...
-1
votes
0
answers
10
views
SAML / SSO - Where the credentials are stored?
At my work, my manager told me to read about OAuth2 and SAML.
I know OAuth2 for a long time and now I am trying to understand SAML, but I just can't.
Here is what I understand about SAML:
SAML is ...
-1
votes
0
answers
12
views
User authenticated at IdP different from User specified in the request message while Logout using SAML
User authenticated at IdP different from User specified in the request message while Logout using SAML status is Requester and Identity provider is OAM. please give me solution what to fix
there ...
1
vote
1
answer
23
views
SP Tried to perform SingleLogout received an error "HTTP Form does not contain SAMLRequest"
I took this sample test SP code from ItFoxTec and perform a SingleLogout from this controller:
[Route("SingleLogout")]
public async Task<IActionResult> SingleLogout()
{
...
0
votes
1
answer
25
views
SimpleSAML\Error\Exception: Could not find the metadata of an IdP with entity ID
We have a self-managed file exchange server that gives the following error when you attempt to log in at the web interface:
SimpleSAML\Error\Error: UNHANDLEDEXCEPTION
Backtrace:
1 www/_include.php:17 ...
1
vote
1
answer
31
views
How to logout from SAML authentication?
I am using a SAML link for authentication.
and here is my code implementation:
class LoginWebView extends StatefulWidget {
const LoginWebView({super.key});
@override
State<LoginWebView> ...
0
votes
2
answers
35
views
Implementing SSO with Corporate AD via LDAP: Do I Still Need Azure AD?
I've made progress setting up Single Sign-On (SSO) by allowing users to log in with their Microsoft accounts through Azure AD in my ASP.NET web application (.aspx).
Now, my client wants me to use ...
0
votes
0
answers
12
views
Configurate Keycloak as Identity Broker for login into AWS
I need to configure Keycloak as identity broker to log with an external IdP into AWS console.
What I'm trying to reach is explained in this picture
identity brokering
I have configured my External IdP ...
0
votes
0
answers
20
views
How to implement SAML SSO in React native?
I have some details of SSO,
SAML attributes returned by IDP: (using my account as an example )
mail : urn:oid:0.9.2357.13254323.145.2.6
(user@gmail.com)
uid : urn:oid:5.8.5468.34689645.460.5.6
(...
1
vote
0
answers
30
views
In Liferay how to get the identity provider info and use them to programmatically trigger the SSO
I'm really new to Liferay and SSO and I have to do a very specific thing.
I am using Liferay DXP 7.4, so I have the Liferay SAML Connector 2.0 available.
In particular I need to configure Liferay as a ...
0
votes
0
answers
12
views
Google App Engine webchat with external SSO
I created a simple webchat using Google app engine and Dialogflow. The functions of webchat are not important here, what is important is that I want to authorize the SSO of my university to use one of ...
0
votes
0
answers
29
views
How do you get AWS SDK to obtain a role when signing in from Azure AD SSO (Enterprise Application) redirected via Relay State?
I'm working on allowing the AWS SDK to access AWS resources from the browser. I'm using Azure AD Idp-initiated Enterprise Applications flow. The Consuming service is signin.aws.amazom.com/saml and the ...
0
votes
0
answers
34
views
Creating mock IdP for sending SAML messages
I'm new to SAML and exchange between Identity Providers (IdP) and Service Providers (SP) and in app I'm currently working on (.NET MVC) we have IdP that store credentials of users and have its own ...
0
votes
0
answers
37
views
Steps to Publish a SAML App to Google Workspace
I'm looking to develop and publish a SAML app to the Google Apps Marketplace. While I've found information on creating custom SAML apps, the goal is to make this app available within the Pre-...
1
vote
1
answer
30
views
Is ITFoxTec.Identity.Saml2 library Support Signing of both SAML Responses and Assertions?
I am using okta as my IDP, when i am trying to signed both response and assertion signatures at the same time i observed its not supporting. If ITFoxTec library supports signing of both SAML responses ...
0
votes
1
answer
25
views
Identify IdP from SAML and OIDC configurations
User has configured our app to connect to any identity provider using SAML or OpenID Connect protocol. From the configuration is there a way to identity what is the source Identity provider be it ...
0
votes
0
answers
35
views
Pass empty regex replacement in Azure group claim
I am using SAML group claim for provisioning users into a group in applications upon login. These groups will have a prefix in Azure, and that prefix should be dropped when they login so that they are ...
1
vote
1
answer
31
views
simpleSAMLphp Exception: No module named 'ldap' has been installed
Really struggling to find a solution for this problem. I am trying to configure my simpleSAMLphp server to use LDAP for authentication, but am getting exceptions originating from the 'ldap' module.
My ...
0
votes
0
answers
20
views
SignXML verification started to fail as of November 2022 - 'Signature verification failed: bad signature'
We use a python solution using SignXML and LXML - latest versions to run a production SSO solution. We are the Service Provider. We do receive a sign XML assertions when a user tries to access our ...
0
votes
1
answer
16
views
Meaning of "Role name Mapper" in Protocol Mapper
The question is in the title.
Can someone please explain what's the purpose of "Role name Mapper" and how it configures.
I don't have the access to keycloak sadly.
-3
votes
1
answer
41
views
How can relation multi-subdomain websites with separated databases?
I development multi subdomain website with separated databases with sso, like as:
www.example.com (corporate web & shop) - www_db
blog.example.com - blog_db
forum.example.com - forum_db
...
0
votes
2
answers
22
views
Saml Integration in ASP.NET
I am using ASP.NET and Duende Identity Server to manage authentication. While Identity Server already implements a way to dynamically add an OIDC provider at runtime, I am now attempting to achieve a ...
0
votes
0
answers
8
views
pysaml how to share extra data between saml request and saml response
I want to transmit additional information from a SAML request to a SAML response.
Is it possible to utilize the SAML configuration in the pysaml library for this task?
To elaborate, if I include a ...
1
vote
0
answers
17
views
Alternatives for KeyManager & JKSKeyManager in Spring-Security-SAML2-Service-Provider 6.1.3?
I am currently working on a project that makes use of Spring's SAML2 security module. The project is using an older, end-of-life version, spring-security-saml2-core 1.0.10.RELEASE. As part of the ...
0
votes
1
answer
18
views
OpenLiberty => Change SAML issuer
Is there a way to change SAML issuer URI in OpenLiberty configuration? i cannot find any documentation about it.
IdP expects svil.environment while i'm sending https://svil.environment/ibm/saml20/...
0
votes
0
answers
21
views
Can't find Self-Service Registration in OKTA
I am attempting to locate the Self-Service Registration option within the Okta dashboard. Previously, it was located under the Directory tab, however, I am unable to locate it now. There may have been ...
0
votes
0
answers
24
views
Oauth vs. Identity Federation: Ensuring Seamless Authentication for Different Apps Without Re-entering Credentials
Currently, I have the following solution: an app that utilizes an Identity Provider (IDP) for OAuth 2.0 authentication (the IDP does not support OpenID). This application receives an authorization ...
1
vote
1
answer
35
views
SSO Login on Crafter CMS
i am crafter user anyway, i want to setting single sign on on my crafter using SAML configuration, I have seen Crafter documentation and follow every step-by-step. Specific related on Identity ...
0
votes
0
answers
25
views
SAML Azure configured as service provider and SP logout is not redirecting to the IBM ISAM IDP SSO page after logging out from SP Azure
SAML Azure SP initiated logout is not redirecting to the IBM ISAM IDP SSO page after logging out from SP Azure
any idea where to redirect to sso IBM ISAM IDP SSO page after azure logout from saml.
...
0
votes
0
answers
30
views
SAML VALIDATION
I have a controller which takes the base64 encoded SAML response as the body,
I want to check whether my SAML response has been tampered with.
I have public key which i got from the metadata file, is ...
0
votes
0
answers
49
views
Upgrade from spring-security-saml2-core 1.0.10.RELEASE to 2.0.0.M31 leads to missing import errors
I'm working on upgrading spring-security-saml2-core from version 1.0.10.RELEASE to 2.0.0.M31 in my project. I don't want to switch to the newer spring-security-library. After the upgrade, I face the ...
5
votes
0
answers
140
views
SAML2 Implementation with Spring Boot Version 3.X and Java 17
I am upgrading the current Spring Security SAML extension project to SAML2 authentication. I found a question where my sample existing security configuration looks like Existing Security Configuration....
0
votes
0
answers
20
views
Producing Spring Boot SOAP Service with SAML protection
I need to produce an SOAP Service with Spring Boot. That must be secured by SAML Token.
For now I have the SOAP Service running and tried to implement the authentication thing.
I started with a ...
0
votes
1
answer
41
views
How to handle SSO authentication login using Jmeter
I want to perform performance test on a web application. It has SSO authentication during login.
My Jmeter scripts are failing because of the SSO authentication. Kindly advise if Jmeter can handle SSO ...
0
votes
0
answers
14
views
GitHub SCIM Cross Identity Identifier ISSUE
I am using GitHub Enterprise Cloud, and in one of the organization I have enabled the SAML SSO and therefor I am able to use SCIM endpoints to create , update and delete USERS. After I create the user,...
0
votes
0
answers
22
views
SSO: SP-initiated login to another Service Provider
I have a scenario where the client has an SP that authenticates against an IdP. This is working today. They want to add a button that, when clicked, will open a new tab and send the user to a 3rd ...
0
votes
1
answer
76
views
Keycloak uses samesite=None and failing in Pen test
I understand that Keycloak uses Samesite=None explicitly to work in SAML. I have situation where you can submit the form from cross domain.
For ex, Take the HTML content from the personal info form ...
0
votes
1
answer
45
views
Access the http request object from a passport strategy constructor
I need to configure my saml strategy dynamically.
Specifically I need to retrieve a parameter from the login URL.
I paste here some of my code to better explain my situation:
// auth.controller.ts
@...
0
votes
0
answers
39
views
Using a single loginProcessingUrl for multiple identity providers in spring security saml2Login
I'm trying to let users setup SAML identity providers dynamically in our application using spring-security 5.7.x. When configuring saml2 using the HttpSecurity instance, one can provide a ...
0
votes
0
answers
29
views
Returning SAML status from Keycloak custom authenticator
I'm trying to implement a custom authenticator for Keycloak where, when authentication fails I set context.failure(AuthenticationFlowError.ACCESS_DENIED)
public void authenticate(...
0
votes
0
answers
25
views
IDP initiated single logout using SAML LogoutRequest , keycloak acting as identity broker
I have my application(React for front end and backend in spring boot) acting as External Identity provider while Keycloak is acting as Identity Broker. Sentry is a service provider in which I wanted ...
0
votes
1
answer
85
views
azure b2c SAML: AuthRequest does not have assertion consumer service URL
i configured the saml with azure b2c.
following is my azure b2c menifest file.
{
"id": "xxx",
"acceptMappedClaims": null,
"accessTokenAcceptedVersion&...
0
votes
1
answer
40
views
Spring Boot SAML Integration with Wso2 Identity Server
I have to integrate my sprint boot Application with latest version 3.1.2, I have to use SAML Authentication protocol and Integrate the same with wso2 Identity server,can i get any references or ...
1
vote
0
answers
19
views
Setting up SAML Identity Provider with .NET Web Forms and AWS Cognito
Hello StackOverflow community,
I'm currently working on a project where I need to set up a SAML Identity Provider for Single Sign-On (SSO). Our existing system uses .NET web forms (C#) with ASPNETDB ...
0
votes
0
answers
31
views
Keycloak configured as SAML IDP fails to return profile info when using google auth
We have a convoluted setup:
One main keycloak server that provides the authentication for our web app (call this KC1)
A secondary keycloak server that acts as a SAML IDP (Call this KC2) and has ...