Questions tagged [wso2-identity-server]
The wso2-identity-server tag has no usage guidance, but it has a tag wiki.
2,992
questions
36
votes
1
answer
1k
views
Custom Claim Handling Failed In Single Sign On
I am using the WSO2 Identity Server for Single Sign-On Implementations.
In my demo applications, I am trying to get Custom claim attributes of authenticated Users from my own JDBC Database.
I ...
23
votes
2
answers
36k
views
Difference between grant_type=client_credentials and grant_type=password in Authentication Flow?
I would like to understand the difference between grant_type=client_credentials and grant_type=password in Authentication or in OAuth2 Flow concept.
I am following below sites:
http://help.atavist....
21
votes
4
answers
102k
views
Spring Boot: Full authentication is required to access this resource
I am doing example of Spring Boot Security with wso2is server from this post https://github.com/angel-git/wso2is-springoauth, when I am trying to access resource with access token I am getting
{"...
10
votes
1
answer
10k
views
OAuth 2.0 using Spring Security + WSO2 Identity Server
I'm developing a web application to expose a number of RESTful services secured by OAuth 2.0. Here is the planned architecture:
1- OAuth Authorization Provider: WSO2 Identity Server (IS)
2- OAuth ...
10
votes
2
answers
3k
views
RBAC/ABAC via XACML policies
I am studying about various types of access control models and came across to know that abac and rbac are the popular ones.
I've a basic scenario for one of my project and I couldn't understand ...
8
votes
2
answers
9k
views
Cannot sign in to management console: potential cross-site request forgery (CSRF) attack thwarted
I'm trying out the WSO2 Identity Server.
I downloaded the version 5.4.0, and started the server on my Windows machine with wso2server.bat --run.
If I try to login to the console with the default ...
8
votes
2
answers
2k
views
SSO Session Timeout works incorrectly
I'm trying to configure session timeout using WSO IS 5.1.0.
I have one Service Provider, which has session timout 10 minutes.
I've configured SSO sesison timeot to 10 minutes in WSO2 is using ...
7
votes
3
answers
8k
views
Access token does not have the openid scope
I am doing sso sample(travelocity.com) example. When I am trying to access user info with oauth access token using this command,
curl -k -H "Authorization: Bearer b68ba941c9da3d2644d8a63154d28"
...
7
votes
1
answer
4k
views
WSO2 identity server api
I am designing a new application that needs identity management functionality (i.e. managing user accounts and roles). I would like to delegate that functionality to an Identity Server.
Is there a ...
7
votes
2
answers
9k
views
Application User tokens Gives Resource Forbidden error in WSO2 API Manager
I have configured wso2 identity server as a key manager for wso2 api manager using the following link.1
I have created the api through wso2 api manager publisher.And i have given auth type as ...
7
votes
1
answer
8k
views
WSO2 IS: How to add SSL Certificate
I've done following steps
Create keystore:
keytool -genkey -alias wso2carbon -keyalg RSA -keystore wso2carbon.jks -keysize 2048
Crete certificate request:
keytool -certreq -alias wso2carbon -...
7
votes
1
answer
640
views
How to make external ldap as primary user store in wso2 identity server 5.10.0
I am trying to setup Apache Directory studio as external ldap(Primary user store) in wso2is 5.10.0 with following configuration in deployment.toml file
[super_admin]
username = "admin"
password = "...
6
votes
1
answer
7k
views
Spring SAML integration with WSO2 Identity server, SAML Message ID not reconised
I have taken the Spring SAML example (see section 4.2 in this guide) which works with the Open source login page SSO, and tried to add support to use WSO2 Identity Server as an additional IDP service.
...
6
votes
2
answers
2k
views
How to create a .NET client for a wso2 Secure Token Service
I need to create a .NET client for a wso2 Secure Token Service.
Normally I would create a simple console or WinForm project adding a Service Reference to it. The exposed WSDL would be turned in a set ...
6
votes
2
answers
3k
views
WSO2 Identity Server and SSO for custom application
We're currently evaluating the WSO2 Identity Server and I got a few questions about it:
Could the Identity Server be used as an SSO provider for custom applications deployed (just like CAS)? Is there ...
6
votes
2
answers
2k
views
WSO2 Identity Server startup error - Error in initializing thrift transport
I just installed WSO IS and receive this error when starting the server.
ERROR {org.wso2.carbon.identity.entitlement.internal.EntitlementServiceComponent}
- Failed to initialize Entitlement Service
...
6
votes
2
answers
2k
views
Spring Security integration with WSO2 Identity Server
Does Spring Security integrates with WSO2 Identity Server? If yes, then is there any sample or tutorial available for this?
5
votes
1
answer
767
views
Remove security only for some requests wso2 api manager
Is it possible to remove security for some specific requests in my api list using WSO2 API manager version 3.
For example, I have following requests
/customer - post
/products - get
/customer/...
5
votes
2
answers
2k
views
WSO2 identity server email as username
We are currently evaluating the WSO2 Identity server. We want to use email address as an username. By default the username is 30 characters, it is not long enough. And it must support both . and @ in ...
5
votes
1
answer
3k
views
WSO2 Identity Server managing users and roles through API
I need to create and manage users in WSO2 Identity Server 3.2.3 through API, I've tried the code sample from http://blog.facilelogin.com/2010/05/managing-users-and-roles-with-wso2.html but is out of ...
5
votes
2
answers
7k
views
WSO2 Identity Server - Carbon cannot execute Java
I'm using Ubuntu 16.04 64-bit. I installed Oracle JDK jdk1.8.0_144 in /usr/local/java and set the symlinks as below.
$ sudo update-alternatives --install "/usr/bin/java" "java" "/usr/local/java/jdk1....
5
votes
1
answer
2k
views
WSO2 Identity Server SAML SSO return url
Is it possible somehow to pass a return url to the Identity Server when performing a SAML SSO and have that url posted back to my assertion url when the user authenticates successfully?
5
votes
3
answers
3k
views
WSO2 - Identity Server and API Manager working together
I'm evaluating WSO2 Identity Server and WSO2 API Manager.
I registered an API and an application on API Manager. I can call the resources successfully.
I could also add an user into Identity Server ...
5
votes
1
answer
14k
views
javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake Java 6 to Java 7
I have this exception
javax.net.ssl.SSLHandshakeException: Remote host closed connection during handshake
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.readRecord(SSLSocketImpl.java:882)
at ...
5
votes
1
answer
5k
views
Refresh token returns invalid grant type
I'm trying to refresh the access token (based on https://docs.wso2.com/display/IS510/Refresh+Token+Grant) obtained from wso2 identity server; the server returns an invalid grant type response
{
"...
5
votes
2
answers
2k
views
Can't validate access token via OAuth2/OpenID Connect with prompt=none parameter on WSO2 Identity Server
An according to OpenID Connect Core 1.0 specification, if authentication request contains parameter prompt with value none, server must process it the following way:
The Authorization Server MUST ...
5
votes
2
answers
4k
views
How can I refresh SAML assertion information from an WSO2 identity server?
I'm building SAML 2.0 based authentication to a web application. The authentication is done against an WSO2 Identity Server (WSO2-IS). I have managed to get the actual authentication working using ...
5
votes
1
answer
1k
views
Unable to issue valid access token from WSO2 IS 5.0.0
I am running WSO2 IS 5.0.0. I have the SP for IS 5.0.0 applied along with all the other security patches issued for that version for Identity Server and Carbon 4.2.0. My environment consists of 4 ...
4
votes
2
answers
1k
views
adding users programmatically in WSO2 API Manager
I am using a combination of WSO2 Identity Server as key server and API Manager for API authorisation against roles.
My requirement is to provide Business users a UI where they can add a user, role and ...
4
votes
3
answers
532
views
WSO2 IS Proxy : Do WSO2 has WSO2 IS Proxy?
I installed and configured WSO2 IS 5.0 But I would like the users access through the proxy. So I would like to know WSO2 has WSO2 IS Proxy or not? Or WSO2 has any product to use for this purpose?
4
votes
4
answers
3k
views
Could not add Service Provider. You might be entering a duplicate Service Provider
I am new to WSO2 Identity Server (IS). I've created few Service Providers (SP) named as eclipse-rest and wpfs-rest as a Service Provider ID.
For eclipse-rest, I created Issuer "eclipse" and for wpfs-...
4
votes
1
answer
4k
views
CORS blocked in wso2 identity server
I use WSO2is 5.7.0 with my angular 6 app, i tried make api call from my app but i have a cors error: Cross-Origin Request Blocked: The Same Origin Policy disallows reading the remote resource at
I ...
4
votes
2
answers
7k
views
Why is AccessTokenRequest's PreservedState perpetually null with a resultant CSRF related InvalidRequestException?
As context, I've been trying to get a fairly simple @SprintBootApplication with an additional @EnableOAuth2Sso annotation integrated with WSO2 Identity Server for quite some time now.
In my mind ...
4
votes
3
answers
1k
views
OpenId Connect with wso2 returns only sub claim
When I ask the information of the user WSO2, the response contains only his sub.
Request GET https://srv-wso2.domain.com:9443/oauth2/userinfo?schema=openid
Request headers {Accept=[application/json, ...
4
votes
6
answers
7k
views
WSO2 SSO always redirects to localhost:9443/samlsso
I'm using WSO2 identity server (on port 9443) and enterprise service bus (ESB, on port 9444). I configured ESB to use IS SSO. But everytime I try to login into ESB it redirects me to IS and there it ...
4
votes
1
answer
3k
views
how to return user attributes in SAML response in WSO2 IS
I need to add the emailaddress which is stored in LDAP as part of the SAML Response. I read a few articles like http://sureshatt.blogspot.co.uk/2012/11/getting-user-claims-over-saml-sso-token.html
...
4
votes
2
answers
2k
views
How to delete tenants in WSO2 Identity Server?
In v 4.6.0, we cannot delete tenats through the UI, only disable. However, I see there is a deleteTenant method on the TenantMgtAdminService soap service.
I have tried to call this service, but I ...
4
votes
1
answer
2k
views
WSO2 Identity Server multiple callback URLs breaks checksession endpoint
I'm having an issue configuring multiple callback urls for a Service Provider in WSO2 Identity Server. This process is necessary for my team to support SLO (Single Logout) with a post logout redirect ...
4
votes
1
answer
1k
views
WSO2 IS setting Issuer in SAML Response to "localhost"
We have a WSO2 Identity Service Provider setup for SAML Inbound Authentication Configuration. However SAML response sent by IS sets Issuer to "localhost" even though we have a different value set in ...
4
votes
1
answer
127
views
WSO2 IS 5.1.0 - Error while updating Service Provider using Soap
While updating permissions to service provider, sometimes leaf nodes are not getting deleted.
For example,
following permissions exist in Service Provider,
BILL/ADD
BILL/REMOVE
REPORT/ADD
REPORT/...
4
votes
1
answer
3k
views
integrating nodejs rest services with wso2
have my rest webservices written in nodejs. I want to implement role based[admin,user,super admin etc] authorisation for these API's
How can use wso2 with NodeJS ?
4
votes
1
answer
389
views
WSo2 API Manager
Which inbuilt key manager ,WSo2 API Manager uses for managing access tokens. Is Ws02 Identity server built within API Manager.
I know that we can configure a third party key manager (with different ...
4
votes
1
answer
3k
views
WSO2 Identity Server external LDAP throws OBJECT_CLASS for OID identityperson does not exist
I am using the Identity Server 4.1.0 and also I am running an ApacheDS within the Apache Directory Studio. So what I want now is connect my IS to the external LDAP.
IS is connecting fine to the ldap, ...
4
votes
3
answers
2k
views
Login fail in management console with admin user after try to integrate user store in wso2-is and wso2-am
I tried to change user store to MySQl and integrate that in Wso2-IS and Wso2-AM(api manager) base on this manual: here.
After all steps in the mentioned manual, I tried login Wso2-AM Management ...
4
votes
1
answer
376
views
Wso2 Identity server - Restrict Inbound Authentication of service provider based on role permission
I have created a tenant 'A' in wso2 IS and added my ldap user store in it. In the tenant 'A', I have configured a 'test' service provider with oauth2 as inbound authentication. As of now, I am ...
4
votes
1
answer
814
views
SSO without Identity Provider Login Page
I am using WSO2 Identity Server for SSO with saml in my demo applications.
My requirement is User should provide Login credentials to Service Provider Login Page, not to Identity Provider page.
I ...
4
votes
1
answer
849
views
Can you change the WSO2 root redirect?
I'd like to change the default redirect for our new WSO2 server, so that if you go to the generic login.domain.com, it'll redirect you to a specific URL instead of the current default of login.domain....
4
votes
1
answer
2k
views
Exception in Authentication Framework WSO2 IS
I am running WSO2 IS 5.0.0. I have the SP for IS 5.0.0 applied along with all the other security patches issued for that version for Identity Server and Carbon 4.2.0. My environment consists of 4 ...
4
votes
1
answer
3k
views
What is the difference between wso2 identity server and CAS?
Recently I learned about wso2 Identity server, it seems it can cover all the functions of CAS(Central Authentication Service) which I am familiar with.
I have the following 3 questions:
what is the ...
4
votes
0
answers
124
views
integrating spring and wso2 identity server remote client
I am trying to integrate spring and wso2 identity server remote client
but I am facing some dependency issues
My POM
<dependency>
<groupId>org.wso2.carbon.identity.user.ws</...