Questions tagged [wso2is]
WSO2 Identity Server enables enterprise architects and developers to improve customer experience by reducing identity provisioning time, guaranteeing secure online interactions, and delivering a reduced single sign-on environment.
2,474
questions
0
votes
0answers
16 views
WSO2 - Using aouth2 mediator in enterprise integrator
I'm using wso2 enterprise integrator for sending request to a api, also identity server for authenticate requests received to api. This is my api:
Api
I created a service on identity server like the ...
1
vote
1answer
24 views
How to configure a self signed certificate in wso2 Identity server which iOS application can accept
I have an iOS application which has OAuth2 enabled login. The mobile app tried to get a oauth2 token from WSO2 Identity Server. When the app tries to communicate WSO2 Oauth Authentication end point, ...
1
vote
0answers
35 views
Scope based access token with wso2 APIM
I have a GraphQL API published with APIM(version 3.2.0) which is protected by a scope (say a local scope named test_scope which is based on a role named test which has the internal/subscriber ...
0
votes
0answers
30 views
WSO2 IS integrating WSO2 APIM using JDBC user store,the sql scripts have error
I follow this documents to integrating these two products.
https://apim.docs.wso2.com/en/latest/install-and-setup/setup/distributed-deployment/configuring-wso2-identity-server-as-a-key-manager/
I want ...
1
vote
0answers
30 views
WSO2 IdentityServer, Field 'REG_VERSION' doesn't have a default value
WSO2 IdentityServer 5.11.0 is showing the below error when starting the service. I am using MySQL as the data source.
[2021-01-20 14:25:29,760] [] INFO {org.wso2.carbon.mex2.internal....
1
vote
0answers
24 views
WSO2 IdentityServer 5.11 and WSO2 API Management 3.2.0 integration have DB script issue
Following the below URL
https://apim.docs.wso2.com/en/latest/install-and-setup/setup/distributed-deployment/configuring-wso2-identity-server-as-a-key-manager/#step-4-configure-wso2-is-with-wso2-api-m
...
0
votes
1answer
49 views
Configuring WSO2 IS as a key manager
I am new to WSO2 IS and WSO2 APIM. I have an all in one instance VM configured with IS(version 5.11.0) and APIM (version 3.2.0). I am trying to use WSO2 IS as the key manager following the below ...
2
votes
1answer
56 views
Difference between console and carbon in WSO2 Identity Server
I am using WSO2 IdentityServer 5.11.0 version. After starting the server, I found that two URLs are appearing :
https://localhost:9443/carbon
https://localhost:9443/console
What is the difference ...
0
votes
0answers
30 views
Integrating WSO2 IdentityServer and WSO2 API Manager
I am using WSO2 IdentityServer 5.11.0 on one machine and WSO2 API Manager 3.2.0 on another machine. All the user-level services (User creation, Role assignment, Group, and permissions) should be ...
1
vote
3answers
76 views
New access token request invalidates all previous tokens in WSO2 IS
We need a user of our application to be able to login from multiple browsers/devices simultaneously with WSO2 IS. Currently we're using OAuth2 implicit grant flow.
User authenticates first time. He ...
0
votes
1answer
29 views
Adding user to WSO2 tenant returns 401 Unathorized
I am trying to add user to a tenant. For that I did the following:
Created tenant in WSO2 instance
Generated access token based on client key and secret for the tenant service provider
Use generated ...
0
votes
1answer
45 views
Is it possible to logout from wso2is from my backend?
Are there another ways of doing logout without redirecting my Frontend to oidc/logout page (it works fine,but isn't it insecure sending idToken and my IDP url to frontend),i have separate front and ...
0
votes
0answers
43 views
WSO2 adding external JAR for use in Adaptive Authentication
I am attempting to add a JAR to WSO2 IS 5.11.0 so that I can call the getSessionData function from the Script Based Adaptive Authentication console.
I cloned the identity-conditional-auth-functions ...
0
votes
1answer
26 views
Adding users to tenant using REST API
According to this documentation I can add users to specific tenant, is there REST API to do this?
1
vote
0answers
41 views
Generate JWT in WSO2 by authenticating user via a different server
How can use WSO2 (5.11) IS to generate JWT with information stored on server that is not WSO2 that is used for autnetication? My use case is to login user via WSO2 IS, but the actual authentication ...
0
votes
0answers
30 views
ESB WSO2 - Using an OAuth base security token on applying security to an API
I'm applying security to an API on WSO2 integrator with this guide:https://docs.wso2.com/display/EI660/Applying+Security+to+an+API+#ApplyingSecuritytoanAPI-UsinganOAuthbasesecuritytoken
I've created a ...
0
votes
1answer
37 views
Getting 403 error when trying to add new tenant
I added a service provider to WSO2IS and use its secret to get an access token, I then use this access token to execute endpoint https://localhost:9443/t/carbon.super/api/server/v1/tenants, but I am ...
0
votes
0answers
30 views
WSO2 Identity Server 5.11.0 My Account personal info not working with Active Directory userstore
I am operating a WSO2 identity server 5.11.0 behind an Apache proxy with a Samba based Active Directory user store. The most relevant claims have been mapped to the local claim dialect. The ...
0
votes
1answer
75 views
Wso2 backchannel logout url giving Unauthorized
I am sending to https://localhost:9443/backlogout?logout_token= my_id_token and getting unauthorized.
0
votes
0answers
42 views
Updating mobile phone during SMSOTP login in WSO2IS is failing with SMSOTPException: User does not exist in the User Store
With SMSOTP enabled (in 5.10.0 with this guide https://is.docs.wso2.com/en/5.10.0/learn/configuring-sms-otp/#configuring-sms-otp), when logging-in with user "john.doe@example.com" (who ...
0
votes
1answer
31 views
NPE when entering invalid code in SMSOTP in WSO2IS
I am trying to enable SMSOTP (in 5.10.0) following this guide https://is.docs.wso2.com/en/5.10.0/learn/configuring-sms-otp/#configuring-sms-otp. When I enter a valid code (that I received via sms) I ...
1
vote
1answer
56 views
WSO2 - IS 5.1.0.x. - Return formattedName in JWT Payload
How do I return attribute "name.formatted" in JWT payload?
Here is my claim configuration:
Here is the profile:
Now, Service Provider's claim config:
This is JWT payload:
Please note ...
0
votes
1answer
107 views
oidc/logout with id_token_hint is not working
I am sending https://localhost:9443/oidc/logout?id_token_hint=my_id_token and getting the page with the message Identity Server You have successfully logged out. But when I go back to the login page,...
2
votes
1answer
96 views
How to add additional request parameters in wso2 retrying?
I need to add one parameter to redirect. When authentication fails WSO2 redirects to login page with &authFailure=true&authFailureMsg=login.fail.message request parameters.
I could not add ...
0
votes
1answer
53 views
How to enable the new & beta GUI of WSO2 IS version 5.11.0?
I've installed the new WSO2 IS (Version 5.11.0) on Debian 10.7 but regardless of their release notes that mention about new GUI based on React, the console interface is like the previous version (5.10....
0
votes
1answer
180 views
WSO2 Identity Server 5.10.0 - Unable to achieve EmailOTP based MFA
I have enabled EmailOTP Identity Provider, using WSO2 Identity Server as Email Provider.
In my Service PRovider, I have enabled EmailOTP as the second step of Authentication.
Angular UI application is ...
0
votes
0answers
46 views
Calling WSO2 APIs from other application is showing error “sun.security.validator.ValidatorException: PKIX path building failed”
I am trying to call WSO2 APIs for creating new user in WSO2 Identity Server. The WSO2 API is as below:
When calling the service using Java, I am getting an error as described below:
curl -v -k --user ...
2
votes
1answer
54 views
In WSO2 IS 5.9.0 how to configure Password Policies And Login Policies with help of an API?
I need to find the REST/SOAP API for Password Policies (Password History and Password Pattern) and Login Policies (Account Locking and Account Disabling).
I am using WSO2 IS 5.9.0.
I am creating a ...
0
votes
1answer
56 views
Specifying custom tenant id in REST API
In SOAP Teanant API I can define my own tenantId (https://docs.wso2.com/display/IS530/Managing+Tenants+with+APIs#ManagingTenantswithAPIs-addTenant()), but in REST API this ability is not available. ...
1
vote
1answer
59 views
WSO2IS 5.11.0 - Blank screen when accessing to /myaccount or /console web page
I deployed to test the last release of WSO2 5.11.0 in Docker container. I did not change anything in the default configuration except the hostname and callbackURL for the "Console" and "...
0
votes
1answer
55 views
Executing wso2is REST API
I want to call wso2is Tenant API, but I cannot get correct authentication steps. I am generating access token using
curl -v -X POST -H "Authorization: Basic <auth>" -k -d "...
-1
votes
1answer
54 views
Change token type of DefaultApplication WSO2 APIM 3.1.0
When creating a new user in WSO2 APIM 3.1.0, by default, he creates an application called DefaultApplication. How do I change this DefaultApplication to be created as OAUTH instead of JWT?
enter image ...
2
votes
2answers
47 views
Myaccount and Console apps in WSO2IS-5.11.0 are not working when the server started with port offset
Changing the port by changing the offset in the deployment.toml or using -DportOffset doesn't get applied to the Console and the My Account applications.
How to reproduce:
Change the offset by adding ...
1
vote
2answers
58 views
WSO2 Tenant Restful API as an alternative to SOAP
I experimented with Tenant API https://docs.wso2.com/m/mobile.action#page/92523614 which is using SOAP, is there REST alternative for this?
0
votes
1answer
94 views
Unable to terminate WSO2 IS sessions
I previously had issues with WSO2 IS active-sessions-limit-handler not working. It was resolved by a previous question I asked (I upgraded to 5.11.0).
Now the issue is that when I follow this guide ...
0
votes
1answer
26 views
WSO2 Identity Manager 5.6 : backup and restore procedures
Good morning,
I looked in the forum here and could not find the answer. If I overlooked it, I apologize...
I just joined an existing project team using WSO2 Identity Manager 5.6 and API Gateway.
I ...
0
votes
1answer
76 views
Self Register doesn't work in wso2is 5.11.0 after self-signed certificate setup
In wso2is 5.11.0 user trying to self register cause a "javax.net.ssl.SSLException: hostname in certificate didn't match: != ........." exception. The same configuration with same keystore ...
0
votes
0answers
38 views
WSO2 IS - Redirection URL after e-mail link confirmation
Is there a way to change redirect URL after user clicks on confirmation link sent to e-mail?
According to this documentation when new user is added, it must confirm e-mail before first login. It is ...
0
votes
1answer
59 views
WSO2 IS 5.9 Error when creating Secondary User Store
I have changed the default user store from LDAP to JDBC, and after that change, I cannot create secondary user stores based on LDAP. I always get the following error when creating it in the form:
TID: ...
0
votes
1answer
32 views
Get Version Number of WSO2 Identity Server from Carbon Admin Portal
I am using WSO2's Identity Server. I would like to know the current version of my Identity Server so I can see if this pull request should be in my version.
Is there a way to see the version of WSO2'...
0
votes
1answer
46 views
Re-Enable message to notify user of non-existance
Our Wso2 IS (5.7.4) implementation was setup with reCaptcha. At that time, the message a customer would receive on screen during a username recovery to tell them the user was not found was disabled. ...
0
votes
0answers
40 views
CARBON cannot execute /System/Library/Frameworks/JavaVM.framework/Versions/CurrentJDK/Home/bin/java in macOS Catalina
I am running the WSO2IS source code in eclipse by using maven.
INFO [org.wso2.carbon.automation.extensions.servers.carbonserver.CarbonServerManager] - Starting carbon server.............
INFO [org....
0
votes
1answer
60 views
Unable to limit maximum session on WSO2 Identity Server
I am using WSO2 IS 5.10.0 running in the official Docker image and followed the guide here to setup session limiting for users with defined roles. I have attempted to use the main way described in the ...
0
votes
0answers
22 views
Store user certificate into WSO2 IS account
is there a way to store user certificates into WSO2 Identity Server account space? I mean, make WSO2IS work as SoftHSM? This requirement is necessary because there are some external services that ...
0
votes
1answer
39 views
SAM2 Web SSO Configuration is not opening JSPException while including path '/sso-saml/add_service_provider.jsp
When configuring SAM2 with SSO, we are not able to proceed because of a configuration issue in the "Inbound Authentication Configuration" page. The log is showing as below:
[2020-12-03 13:04:...
0
votes
0answers
34 views
Email OTP authentication fails with SaaS Service Provider in WSO2 Identity Server 5.10
I am using WSO2 IS 5.10 as the auth server for multi-tenant app. I have configured a Service Provider in the WSO2 IS super tenant and marked it as "SaaS". For each tenant, I create a new ...
1
vote
1answer
73 views
In wso2 IS XACML policy how to validate role and its permissions
In wso2 identity server how to add custom permission like for a role useroperation associate permissions create,update,delete. How can I create the permissions like this.
How can use those assigned ...
1
vote
1answer
55 views
Create Service Provider with Oauth2 with SOAP
I am trying to create a SP via SOAP. The call for creating a SP is correct after which I try to configure Oauth2 via SOAP specifying oauthConsumerKey and oauthConsumerSecret like so
<soapenv:...
0
votes
0answers
34 views
Can I use WSO2 Identity Server to restrict the topics a MQTT subscriber can collect?
I want to restrict access to specific MQTT topics base on user authentication.
I want to be able to control the access of the MQTT Broker and know exactly who distributed a data.
I know you can use ...
0
votes
1answer
92 views
WSO2 Identity Server(IS) not Displaying Claims in the Default Profile
I'm using WSO2 IS 5.3.0 in a clustered environment.
It was noticed that the claims are not being displayed in the default user profile in any of the users even after they are given as "Supported ...