Questions tagged [wso2-identity-server]
The wso2-identity-server tag has no usage guidance.
2,740
questions
0
votes
0
answers
8
views
Wso2 IS adaptive authentication clear session on backbutton click
I am using wso2 IS 5.11 configured with basic auth(login page) and password reset enforcer which will force user to update password if it is expired.
But after basic authentication(login page) sucess ...
0
votes
0
answers
11
views
Include CORS Headers in WSO2 APIM 4.0.0 Token API Response
Good morning everybody.
I am working witn WSO2 APIM 4.0.0 using WSO2 IS 5.11.0 as Key Manager, when a WSO2 APIM hosted api is called from frontend application, the following error appears in developer'...
0
votes
1
answer
31
views
wso2is start in developer mode
I'm working with WSO2 Identity Server and I'm curious if there is a way to run the product in developer mode without building each component of identity server. I found a way to start the "My ...
0
votes
1
answer
34
views
wso2 is 5.11.0 adaptive authentication retry page is not coming
I am using custom authenticator, if it fails then basic authenticator will be used for login and on login success I am using another authenticator to set the custom claims and after that a forced ...
0
votes
1
answer
52
views
WSO2 with plugin WS-Trust Authenticator sends saml 1.1 request
I have been trying to set up STS for my wso2 is, but the request it sends is 1.1, and I need SAML 2.0 I cant find anywhere where I can change this configuration.
I need this to be SAML 2.0. Is there a ...
0
votes
1
answer
28
views
Get data from additional table in userstore during authentication
I had to create additional table in tenant user store to store some specific data. Now I need to fetch data from this table during authentication in authenticator. What possibilities do I have to make ...
0
votes
1
answer
30
views
set "response_mode and code_challenge_methods_supported
I'm using the asgardeo library for tomcat and i was wondering if there was a possibility to set the parameter "code_challenge_methods_supported" and "response_mode" by config file ...
0
votes
1
answer
57
views
WSO2-IS Recover Password with Mail - IdentityRecoveryServerException
I've configured an user and tried to use Recover Password by Mail from WSO2-IS following this documentation:
Password Recovery by Mail
But when I enter with my email and click on Submit on MyAccount ...
1
vote
1
answer
79
views
Is there any WSO2I.S REST API to pass an old and new password in case user forgot?
I'm using WSO2 I.S REST API to create users using SCIM 2.0 but I didn't find any method to use in case the user forgot his password. Is there any method? Have any example using a Java application ...
0
votes
1
answer
62
views
wso2 identity server : how to limit active session to one session only, and internally invalidate other active session
I want to limit active users to one user, I'm using service provider OAuth 2.0. The solution provided in wso2 documentation doesn't fit my requirement, I don't want to show active sessions and let ...
1
vote
1
answer
81
views
WSO2 does not start; The process is being killed
I installed wso2 on linux server. When I want to run the application with the sh wso2server.sh command in the bin file, "Killed" appears on the console screen and the application does not ...
2
votes
0
answers
110
views
Lock in wso2 Identity Server
I ask you the following question to see if you can help me
Every day I come across the following locks, do you have any idea how to fix them?
LOG: process 11976 still waiting for ShareLock on ...
0
votes
1
answer
78
views
Configure WSO2 API Manager with a Loadbalancer with a domain name
We want to run the WSO2 Api Manager application under the domain. Via https://domainname.com. The /carbon application is running and there is no problem. But /devportal and /publisher redirect to ...
0
votes
1
answer
93
views
WSO2 IS: user can login from one pc only at a time
In WSO2 Identity Server, I've a user whose credentials are shared between some people.
When I login using these credentials, everyone else logs out
Is there anyway to change this ?
0
votes
1
answer
78
views
Which query protocol does Wso2 Identity Server use to communicate with PostgreSQL Database?
I need to know which "query protocol" Wso2 Identity Server is using to connect with PostgreSQL Database.
Thanks in advance.
0
votes
1
answer
105
views
Search user by custom claim filter
I need to search user in identity server by using custom claim i.e. 'cnic' as a filter. I'm sending the following request packet in postman for this purpose but it gives me error. I'm using version 5....
0
votes
1
answer
82
views
Wso2 self registration page how to call rest api for autofill
In wso2 is 5.10 I wanted to populate fields based on api call response if the user inputs a field in self registration form. How to implement in self registration jsp page as the api should not be ...
-1
votes
1
answer
78
views
In wso2 is 5.10 self registration how to onboard user without password
In wso2IS 5.11 how can we onboard user without password during self registration. I tried to disable the validation in self registration page it didn't worked. Is there any way in which we can onboard ...
0
votes
1
answer
96
views
Wso2 IS SMS OTP returns 401 page after login
Wso2 IS 5.10.0 I have configured basic auth and sms otp. I wanted to trigger basic auth using url like below without login page(skipping login page with authentication at backend with the username and ...
0
votes
1
answer
87
views
Wso2 IS 5.10.4 Error while updating Service Provider: Duplicate Key
When I try to switch an SP from Authentication Type: Basic, to Federated Authentication: our azure idp, I receive the following gui popup error:
Error while updating Service Provider : Duplicate key [...
0
votes
2
answers
244
views
iframe session issue in OIDC client
I'm using OIDC Client and WSO2 API Manager 3.2.0 in my angular application for authentication. Everything works fine until I hit log out.
First, I log into the application from one tab and then ...
0
votes
1
answer
77
views
WSO2 rest api to fetch apps list redirects to login page
I have a running instance of WSO2 on kubernetes. I need to call the rest APIs for listing and exporting the apps, which are like below:
https://<base_URL>/t/<tenant_domain>/api/server/v1/
...
0
votes
0
answers
96
views
Access Token contains incorrect scopes and does not match with the user roles
I am using WSO2 Identity Server 5.10 and API manger 3.2.
When I generate JWT access token, it does not contain required scopes wrt to the roles assigned to the user.
Role validation of the user is ...
1
vote
1
answer
63
views
Error while testing the logging in to Google using the WSO2 Identity Server
I tried to configure Google as a service provider for WSO2 Identity Server, according the documentation (https://is.docs.wso2.com/en/latest/learn/logging-in-to-google-using-the-identity-server/#...
0
votes
1
answer
146
views
how to run multiple commands in Kubernetes pod in specific path
I want to run two different commands in two different location inside the kubernetes pod. How can I do it. My approach is below;
apiVersion: apps/v1
kind: Deployment
metadata:
name: wso2is-...
0
votes
0
answers
114
views
WSO2 IS and Keycloak (Invalid authorization code received from token request)
I'm having an issue integrating wso2-is with an external identity provider (keycloak). I've been checking a lot of posts and questions but I can't resolve it.
Authentication must be done with PKCE ...
0
votes
0
answers
90
views
"Could not join cluster. Shutting down now!" Randomly
I'm having some trouble with hazelcast clustering following are the details.
versions: hazelcast-all v3.12.2, openjdk version "11.0.8" 2020-07-14, WSO2IS-5.9
Issue:
We have a WSO2 server and ...
0
votes
0
answers
31
views
wso2mi 4.1 - Get CN from an X509 certificate for XACML subject-id
I followed applying security to a proxy service article.
My problem is that in the XACML request the subject-id property value is an LDAP query "CN=localhost, OU=WSO2, O=WSO2, L=Mountain View, ST=...
0
votes
2
answers
130
views
Perform a login only with an Angular SPA with SSO identity server WSO2
I want to login to WSO2 , using SSO but without a server, just using Angular. Is that possible ?
-2
votes
1
answer
44
views
Info required regarding Security+Advisory+WSO2-2021-1603
For the advisory Security+Advisory+WSO2-2021-1603,
https://docs.wso2.com/display/Security/Security+Advisory+WSO2-2021-1603
the fix mentioned is to use the public fix at: https://github.com/wso2/carbon-...
0
votes
0
answers
57
views
Configuring External LDAP - I can see users but they can't log in
I am working on a fresh install of WSO2 Identity Server 5.10 with the Ellucian addons.
I have everything almost working, just one thing is keeping me back. I have added my LDAP users and I can list ...
0
votes
1
answer
89
views
How can I add users into a wso2 Identity server tenant via Rest APIs?
enter image description hereI am trying to add users into a tenant using this url https://localhost:9443/t/{tenant-domain}/api/server/v1
But it responds with 200 OK status but no user is getting added ...
1
vote
0
answers
103
views
Unable to login to wso2 carbon
I was configuring wso2 to user mysql db as primary source in deployment.toml file. service are running without any error. when i try to access carbon console i'm getting error in logs.
Error:-
ERROR {...
0
votes
1
answer
90
views
How to send inline xml in curl with multipart/form-data
I need to send some inline xml as a value in multipart/form-data request with curl.
To be more precise, Im using ansible shell to run this curl. I have a problem that when request is send I got an ...
0
votes
1
answer
118
views
( WSO2 AM 4.1 : Token Endpoint ) Can we use the gateway as the default token Endpoint?
in new wso2 apim versions (4.0/4.1) the default token endpoint has changed . It used to be the Gateway : https://gw.wso2.com/oauth2/token and the the call is redirected to the key manager node . Now ...
0
votes
1
answer
64
views
how use wso2 OAuth mediator in micro integrator 4.1
I can not figure out how to use the wso2 OAuth mediator. I use the wso2 micro integrator 4.1, identity server 5.11, and wso2 IntegrationStudio 8.1.
Is this true: OAuth mediator gets an access token ...
0
votes
0
answers
41
views
OAuth mediator error: Unable to sendViaPost to url. javax.net.ssl.SSLPeerUnverifiedException: peer not authenticated
At the beginning of the inSequence, I have an OAuth mediator.
<oauthService remoteServiceUrl="https://xx.xx.x.xxx:9444/services/" password="admin" username="admin"/>...
0
votes
0
answers
56
views
WSO2IS error: The service cannot be found for the endpoint reference (EPR) http://xx.xx.x.xxx:9764/services/OAuth2TokenValidationService
Based on OAuth Token Validation Using SOAP Service, I added
[admin_service.wsdl]
enable = true
To deployment.toml. now, I can get the WSDL document from:
http://xx.xx.x.xxx:9764/services/...
1
vote
0
answers
138
views
SAML2 Assertion Audience Restriction validation failed
I am trying out pickup-dispatch saml web app with IS 5.9.0.[1] I created a service provider in one of my tenant. In the configs, I didn't enable Enable Audience Restriction. But once I logged in to ...
0
votes
1
answer
39
views
401 Unauthorised in wso2 serrvice provider inittialisation
I am trying to hit the initiliase service provider api /services/IdentityApplicationManagementService using request body:
<soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/...
1
vote
0
answers
51
views
How to integrate wso2 esb and wso2 identity server
We are using wso2 identity server as an IAM solution(for creating roles and users and tenants). We are now implementing the architecture using wso2 ESB (in wso2 integration studio). So is there a way ...
0
votes
0
answers
39
views
wso2 samlsso allows HTTP verb Tampering
During dynamic application scan , we have noticed that wso2 identity server samlsso is allowing sensitive information(password) to pass in the payload of the GET request, which should not happen.
The ...
0
votes
1
answer
87
views
Allowing apostrophe in username and email address WSO2 Identity Server [5.8.0]
We have a WSO2 Identity Server 5.8.0 currently setup and running. By default it looks like the apostrophe isn’t acceptable in the username or email address for the user.
Three places give me errors ...
0
votes
1
answer
75
views
WSO2 Identity Server Concept of Users
I am new to WSO2 Identity Server and what I intend to use it for user creation, authentication and authorization for microservices(4 micro-services). However, I am struggling to grab the concept of ...
0
votes
0
answers
93
views
WSO2 token generation, /oauth2/token service failing after 20th request been hit
I am using WSO2 for token generation. By using this console: https://localhost:9443/carbon/admin/login.jsp
I am calling http://localhost:9763**/oauth2/token** service by passing required parameters
&...
0
votes
1
answer
69
views
WSO2 IdentitiServer 5.10.0 :How to integrate route mobile SMS Provider with Wso2 Identity server MFA
We have integrated WSO2 Identity Server Multifactor Authentication with our web application,
and tested the SMS Otp Using Nexmo(Vonage) free account.
Now we wanted to integrate route mobile sms ...
0
votes
1
answer
42
views
WSO2 5.3.0 IWA - not working with Java 1.8 or later version
I am trying to enable IWA authentication with java 1.7 its working fine but with the later version, it's giving NTLM token not found error.
Any idea?
0
votes
0
answers
61
views
WSO2 Identity Server JWT - How to generate the token with a EXP in seconds?
My legacy wso2 (version 5.1.0) is generating tokens with the EXP field in milliseconds-precision. This makes it quite unsuited for a integration im working on.
How can I make it be generated with ...
0
votes
1
answer
143
views
WSO2 Identity Server: update user fails
Im trying to update a user i created.
It says Error while updating attributes of user: vaisakh@abcd.com
I've followed these steps before https://is.docs.wso2.com/en/latest/learn/using-email-address-as-...
0
votes
1
answer
20
views
Is it possible to bind api consumers to certain ip address so that they can invoke an api their own ip address in wso2 apim 4.0.0?
I am exploring wso2 apim 4.0.0. I would like to find out if it is possible to bind a user to certain ip address so that it can invoke an api only from specified ip address.
For instance user1 one is ...