Questions tagged [saml]

Security Assertion Markup Language (SAML) is a standard for logging users into applications based on their sessions in another context.

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

Webpack module federation and SAML SSO

Currently we have 2 applications that are build in different server groups. Each server group is protected with SAML SSO. 1-st application - is a parent that calls 2-nd application (which is ...
Denis Bahlei's user avatar
0 votes
0 answers
16 views

SSO Login to AWS Connect using Cognito

My site has login through AWS Cognito Identity. And then user login to AWS Connect in pop-up window. I need combine it to one login. Is it possible to make it without external services, using AWS only?...
Elena M's user avatar
1 vote
1 answer
14 views

There is no NameId in User Claims for performing Single Logout

When I tried to perform Single Logout from my IdP I received an error "NameId is required to do logout". Here's my controller: [HttpPost("logout")] public Task<IActionResult> ...
Wavesolid's user avatar
  • 197
0 votes
0 answers
17 views

Set-MsolDomainFederationSettings: Use NextSigningCertificate or SigningCertificate to update expiring cert?

When a cert is going to expire, I know you can use NextSigningCertificate to add a new cert that should be used when the current one expires. I'm wondering is it also an option to use ...
Tim's user avatar
  • 1
0 votes
0 answers
10 views

Okta SAML2 Single Logout issue

ITfoxtec SAML 2.0 - Single Logout I have Okta as IdP and one SP setup. SSO works great between them. Single Logout does not work for me. I got the 403 unauthorized error SingleLogout ...
Josh Nguyen's user avatar
1 vote
0 answers
21 views

CAS Delegated authentication SAML/OIDC

I'm trying to test a POC with CAS Delegated Authentication PAC4J. The target Authentication flow is the following: Client requests access to SP (SAML client) SP redirects to my CAS Server (SAML IDP) ...
med_alpa's user avatar
  • 321
-1 votes
0 answers
10 views

SAML / SSO - Where the credentials are stored?

At my work, my manager told me to read about OAuth2 and SAML. I know OAuth2 for a long time and now I am trying to understand SAML, but I just can't. Here is what I understand about SAML: SAML is ...
matan__2's user avatar
-1 votes
0 answers
12 views

User authenticated at IdP different from User specified in the request message while Logout using SAML

User authenticated at IdP different from User specified in the request message while Logout using SAML status is Requester and Identity provider is OAM. please give me solution what to fix there ...
vivek sharma's user avatar
1 vote
1 answer
23 views

SP Tried to perform SingleLogout received an error "HTTP Form does not contain SAMLRequest"

I took this sample test SP code from ItFoxTec and perform a SingleLogout from this controller: [Route("SingleLogout")] public async Task<IActionResult> SingleLogout() { ...
Wavesolid's user avatar
  • 197
0 votes
1 answer
25 views

SimpleSAML\Error\Exception: Could not find the metadata of an IdP with entity ID

We have a self-managed file exchange server that gives the following error when you attempt to log in at the web interface: SimpleSAML\Error\Error: UNHANDLEDEXCEPTION Backtrace: 1 www/_include.php:17 ...
Richard Allen Stubbs's user avatar
1 vote
1 answer
31 views

How to logout from SAML authentication?

I am using a SAML link for authentication. and here is my code implementation: class LoginWebView extends StatefulWidget { const LoginWebView({super.key}); @override State<LoginWebView> ...
Saurabh Jain's user avatar
0 votes
2 answers
35 views

Implementing SSO with Corporate AD via LDAP: Do I Still Need Azure AD?

I've made progress setting up Single Sign-On (SSO) by allowing users to log in with their Microsoft accounts through Azure AD in my ASP.NET web application (.aspx). Now, my client wants me to use ...
Snooper_A's user avatar
0 votes
0 answers
12 views

Configurate Keycloak as Identity Broker for login into AWS

I need to configure Keycloak as identity broker to log with an external IdP into AWS console. What I'm trying to reach is explained in this picture identity brokering I have configured my External IdP ...
Felice Coppola's user avatar
0 votes
0 answers
20 views

How to implement SAML SSO in React native?

I have some details of SSO, SAML attributes returned by IDP: (using my account as an example ) mail : urn:oid:0.9.2357.13254323.145.2.6 (user@gmail.com) uid : urn:oid:5.8.5468.34689645.460.5.6 (...
Meet Patel's user avatar
1 vote
0 answers
30 views

In Liferay how to get the identity provider info and use them to programmatically trigger the SSO

I'm really new to Liferay and SSO and I have to do a very specific thing. I am using Liferay DXP 7.4, so I have the Liferay SAML Connector 2.0 available. In particular I need to configure Liferay as a ...
George Lords of Castle's user avatar
0 votes
0 answers
12 views

Google App Engine webchat with external SSO

I created a simple webchat using Google app engine and Dialogflow. The functions of webchat are not important here, what is important is that I want to authorize the SSO of my university to use one of ...
Mihov's user avatar
  • 5
0 votes
0 answers
29 views

How do you get AWS SDK to obtain a role when signing in from Azure AD SSO (Enterprise Application) redirected via Relay State?

I'm working on allowing the AWS SDK to access AWS resources from the browser. I'm using Azure AD Idp-initiated Enterprise Applications flow. The Consuming service is signin.aws.amazom.com/saml and the ...
Maxicl's user avatar
  • 26
0 votes
0 answers
34 views

Creating mock IdP for sending SAML messages

I'm new to SAML and exchange between Identity Providers (IdP) and Service Providers (SP) and in app I'm currently working on (.NET MVC) we have IdP that store credentials of users and have its own ...
Dario Lucić's user avatar
0 votes
0 answers
37 views

Steps to Publish a SAML App to Google Workspace

I'm looking to develop and publish a SAML app to the Google Apps Marketplace. While I've found information on creating custom SAML apps, the goal is to make this app available within the Pre-...
pramod's user avatar
  • 117
1 vote
1 answer
30 views

Is ITFoxTec.Identity.Saml2 library Support Signing of both SAML Responses and Assertions?

I am using okta as my IDP, when i am trying to signed both response and assertion signatures at the same time i observed its not supporting. If ITFoxTec library supports signing of both SAML responses ...
Nazmus Sakib's user avatar
0 votes
1 answer
25 views

Identify IdP from SAML and OIDC configurations

User has configured our app to connect to any identity provider using SAML or OpenID Connect protocol. From the configuration is there a way to identity what is the source Identity provider be it ...
TestOnly's user avatar
0 votes
0 answers
35 views

Pass empty regex replacement in Azure group claim

I am using SAML group claim for provisioning users into a group in applications upon login. These groups will have a prefix in Azure, and that prefix should be dropped when they login so that they are ...
Elijah Guastella's user avatar
1 vote
1 answer
31 views

simpleSAMLphp Exception: No module named 'ldap' has been installed

Really struggling to find a solution for this problem. I am trying to configure my simpleSAMLphp server to use LDAP for authentication, but am getting exceptions originating from the 'ldap' module. My ...
jacksc0tt's user avatar
0 votes
0 answers
20 views

SignXML verification started to fail as of November 2022 - 'Signature verification failed: bad signature'

We use a python solution using SignXML and LXML - latest versions to run a production SSO solution. We are the Service Provider. We do receive a sign XML assertions when a user tries to access our ...
Janicko's user avatar
  • 11
0 votes
1 answer
16 views

Meaning of "Role name Mapper" in Protocol Mapper

The question is in the title. Can someone please explain what's the purpose of "Role name Mapper" and how it configures. I don't have the access to keycloak sadly.
Ifwehadamonkey's user avatar
-3 votes
1 answer
41 views

How can relation multi-subdomain websites with separated databases?

I development multi subdomain website with separated databases with sso, like as: www.example.com (corporate web & shop) - www_db blog.example.com - blog_db forum.example.com - forum_db ...
Cardinal's user avatar
0 votes
2 answers
22 views

Saml Integration in ASP.NET

I am using ASP.NET and Duende Identity Server to manage authentication. While Identity Server already implements a way to dynamically add an OIDC provider at runtime, I am now attempting to achieve a ...
xxxyyy's user avatar
  • 9
0 votes
0 answers
8 views

pysaml how to share extra data between saml request and saml response

I want to transmit additional information from a SAML request to a SAML response. Is it possible to utilize the SAML configuration in the pysaml library for this task? To elaborate, if I include a ...
WAEX's user avatar
  • 115
1 vote
0 answers
17 views

Alternatives for KeyManager & JKSKeyManager in Spring-Security-SAML2-Service-Provider 6.1.3?

I am currently working on a project that makes use of Spring's SAML2 security module. The project is using an older, end-of-life version, spring-security-saml2-core 1.0.10.RELEASE. As part of the ...
Sid's user avatar
  • 11
0 votes
1 answer
18 views

OpenLiberty => Change SAML issuer

Is there a way to change SAML issuer URI in OpenLiberty configuration? i cannot find any documentation about it. IdP expects svil.environment while i'm sending https://svil.environment/ibm/saml20/...
Blaster's user avatar
0 votes
0 answers
21 views

Can't find Self-Service Registration in OKTA

I am attempting to locate the Self-Service Registration option within the Okta dashboard. Previously, it was located under the Directory tab, however, I am unable to locate it now. There may have been ...
Alchemist's user avatar
  • 325
0 votes
0 answers
24 views

Oauth vs. Identity Federation: Ensuring Seamless Authentication for Different Apps Without Re-entering Credentials

Currently, I have the following solution: an app that utilizes an Identity Provider (IDP) for OAuth 2.0 authentication (the IDP does not support OpenID). This application receives an authorization ...
Mark's user avatar
  • 41
1 vote
1 answer
35 views

SSO Login on Crafter CMS

i am crafter user anyway, i want to setting single sign on on my crafter using SAML configuration, I have seen Crafter documentation and follow every step-by-step. Specific related on Identity ...
Carmen's user avatar
  • 11
0 votes
0 answers
25 views

SAML Azure configured as service provider and SP logout is not redirecting to the IBM ISAM IDP SSO page after logging out from SP Azure

SAML Azure SP initiated logout is not redirecting to the IBM ISAM IDP SSO page after logging out from SP Azure any idea where to redirect to sso IBM ISAM IDP SSO page after azure logout from saml. ...
Elie BA's user avatar
0 votes
0 answers
30 views

SAML VALIDATION

I have a controller which takes the base64 encoded SAML response as the body, I want to check whether my SAML response has been tampered with. I have public key which i got from the metadata file, is ...
Tushar Rawat's user avatar
0 votes
0 answers
49 views

Upgrade from spring-security-saml2-core 1.0.10.RELEASE to 2.0.0.M31 leads to missing import errors

I'm working on upgrading spring-security-saml2-core from version 1.0.10.RELEASE to 2.0.0.M31 in my project. I don't want to switch to the newer spring-security-library. After the upgrade, I face the ...
Sid's user avatar
  • 11
5 votes
0 answers
140 views

SAML2 Implementation with Spring Boot Version 3.X and Java 17

I am upgrading the current Spring Security SAML extension project to SAML2 authentication. I found a question where my sample existing security configuration looks like Existing Security Configuration....
Heyyou's user avatar
  • 151
0 votes
0 answers
20 views

Producing Spring Boot SOAP Service with SAML protection

I need to produce an SOAP Service with Spring Boot. That must be secured by SAML Token. For now I have the SOAP Service running and tried to implement the authentication thing. I started with a ...
Daniel Pomrehn's user avatar
0 votes
1 answer
41 views

How to handle SSO authentication login using Jmeter

I want to perform performance test on a web application. It has SSO authentication during login. My Jmeter scripts are failing because of the SSO authentication. Kindly advise if Jmeter can handle SSO ...
Willy's user avatar
  • 1
0 votes
0 answers
14 views

GitHub SCIM Cross Identity Identifier ISSUE

I am using GitHub Enterprise Cloud, and in one of the organization I have enabled the SAML SSO and therefor I am able to use SCIM endpoints to create , update and delete USERS. After I create the user,...
saltywhisky's user avatar
0 votes
0 answers
22 views

SSO: SP-initiated login to another Service Provider

I have a scenario where the client has an SP that authenticates against an IdP. This is working today. They want to add a button that, when clicked, will open a new tab and send the user to a 3rd ...
Mr Mikkél's user avatar
  • 2,577
0 votes
1 answer
76 views

Keycloak uses samesite=None and failing in Pen test

I understand that Keycloak uses Samesite=None explicitly to work in SAML. I have situation where you can submit the form from cross domain. For ex, Take the HTML content from the personal info form ...
Selvakumar Ponnusamy's user avatar
0 votes
1 answer
45 views

Access the http request object from a passport strategy constructor

I need to configure my saml strategy dynamically. Specifically I need to retrieve a parameter from the login URL. I paste here some of my code to better explain my situation: // auth.controller.ts @...
Nicola's user avatar
  • 41
0 votes
0 answers
39 views

Using a single loginProcessingUrl for multiple identity providers in spring security saml2Login

I'm trying to let users setup SAML identity providers dynamically in our application using spring-security 5.7.x. When configuring saml2 using the HttpSecurity instance, one can provide a ...
pulse00's user avatar
  • 1,294
0 votes
0 answers
29 views

Returning SAML status from Keycloak custom authenticator

I'm trying to implement a custom authenticator for Keycloak where, when authentication fails I set context.failure(AuthenticationFlowError.ACCESS_DENIED) public void authenticate(...
PassoGiau's user avatar
  • 587
0 votes
0 answers
25 views

IDP initiated single logout using SAML LogoutRequest , keycloak acting as identity broker

I have my application(React for front end and backend in spring boot) acting as External Identity provider while Keycloak is acting as Identity Broker. Sentry is a service provider in which I wanted ...
Rohit Khurana's user avatar
0 votes
1 answer
85 views

azure b2c SAML: AuthRequest does not have assertion consumer service URL

i configured the saml with azure b2c. following is my azure b2c menifest file. { "id": "xxx", "acceptMappedClaims": null, "accessTokenAcceptedVersion&...
WAEX's user avatar
  • 115
0 votes
1 answer
40 views

Spring Boot SAML Integration with Wso2 Identity Server

I have to integrate my sprint boot Application with latest version 3.1.2, I have to use SAML Authentication protocol and Integrate the same with wso2 Identity server,can i get any references or ...
Sujith Fredrick's user avatar
1 vote
0 answers
19 views

Setting up SAML Identity Provider with .NET Web Forms and AWS Cognito

Hello StackOverflow community, I'm currently working on a project where I need to set up a SAML Identity Provider for Single Sign-On (SSO). Our existing system uses .NET web forms (C#) with ASPNETDB ...
aaronksalmon's user avatar
0 votes
0 answers
31 views

Keycloak configured as SAML IDP fails to return profile info when using google auth

We have a convoluted setup: One main keycloak server that provides the authentication for our web app (call this KC1) A secondary keycloak server that acts as a SAML IDP (Call this KC2) and has ...
rep_movsd's user avatar
  • 6,695

1
2 3 4 5
72