Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

3
votes
2answers
43 views

Office 365 SSO with different internal and external domain names

I'm trying to get SSO to work with Office 365 and Sharepoint online and I'm getting really confused. My internal domain is "internal.com" and my external name is "external.com". external.com is added ...
1
vote
2answers
73 views

Sharepoint Online auto acceleration not working

I am trying to work out an SSO solution for a customer of mine who is using SharePoint online with Office 365. I have the following test environment: Domain Server (+ certificate services) ADFS ...
0
votes
0answers
58 views

Keycloak dies every few days for high memory usage

I have a Keycloak in a VPS running as SSO for the rest of the architecture. But every few days, without apparently any reason, in a single spike Keycloak uses all its available memory and enters in a ...
0
votes
0answers
13 views

Restrict access to Linux via PAM with configured SSO

i have SLES 12 in Active Directory Domain. Single Sign On for SSH is configured. I want to allow access to server only to some AD groups via PAM (not only for SSH Service, ftp, etc.). I tried to add ...
0
votes
0answers
27 views

kerberos - active directory domain trust - SSO only working for linux machines

I have an Active Directory Server (2008r2) and a MIT Kerberos Server. Between the realms "AD.EXAMPLE.COM" and "INTERN.EXAMPLE.COM" is a two-way transitive trust, set up on the windows-side with the ...
1
vote
1answer
33 views

FreeIPA and AD password synchronisation

I am attempting to integrate FreeIPA with Active Directory to provide single-sign-on for Windows and Linux users by following this guide. I have successfully created the 'winsync' agreement and ...
0
votes
1answer
20 views

is ad fs for internal crm necessary if we already have an sso for internet facing services?

I never had to deal with AD FS until now so not sure if i get it correctly. We will have an implementation of Dynamic CRM inside our network soon and we already use F5 Big-IP APM for sso with other ...
0
votes
2answers
40 views

Steps for troubleshooting Windows ADFS issue

Yesterday I posted a specific question about an error I'm getting in ADFS that has me stumped. Because I have very limited experience troubleshooting windows based products, I think advice on how to ...
0
votes
1answer
109 views

ADFS error duing SAML Service Provider Login

I have a Spring SAML Project that has been under development for about a month. I've integrated with ADFS and everything has been working well. I'm getting an intermittent error that is becoming ...
0
votes
0answers
38 views

How to configure RSA Archer for Single Sign-On (reverse proxy)

Trying to setup RSA archer to run behind a reverse proxy and accept an HTTP header as an authenticated user. Most applications will accept REMOTE_USER or some arbitrary header and process that user ...
0
votes
1answer
32 views

Trouble activating Single Sign-On (SSO) on Trial subscription to Oracle Cloud

everybody First, I am not sure I am really on topic here, but Oracle's own "cloud" support and community forums are not helpful (they get very little traffic and there were no responses yet). Maybe ...
1
vote
0answers
29 views

How To Use Amazon Cognito As An SSO OpenID Identity Provider

We currently use Google as an OpenID identity provider to our web platform. We need to move away from it. I discovered Amazon Cognito (we already use EC2/S3 and the rest). I discovered the ...
0
votes
0answers
24 views

Setting up Oracle WebGate for Apache web server without OAM

I have the need to mock traffic to and from Oracle WebGate on an Apache web server to test a deliverable server configuration (the web server machine). Is this possible? Background: I am not a system ...
0
votes
1answer
26 views

how to add my google apps accounts to Active directory Federation service?

Note - There are many discussions about syncing Google app accounts to Active directory. This is a different question - I would like my users (about 10) on google app to login to my local web apps i....
0
votes
0answers
23 views

ADFS SimpleSamlPHP - Missing SingleSignOn

We are integrating SimpleSamlPHP with ADFS. We have the federation Metadata with us. But the metadata xml doesn't have the SingleSignOnService Node in it. We have the SingleLogoutService option alone ...
0
votes
0answers
20 views

Research ideas related to Distributed Single Sign on Systems(ADFS) ?

I'm going to do a research related to Security in Distributed Single Sign On system. Then i came up with the idea of implementing federated security using the LDAP and Kerberos as in following figure. ...
0
votes
0answers
66 views

SSO, Kerberos, multiple domains, multiple Linux servers

I have successfully implemented SSO for one production application running on Centos 6 + apache 2.2. connecting to Windows 2008 AD server. Users are coming from 2 different domains: a.com and b.net, ...
0
votes
0answers
194 views

ADFS SSO w/ Chrome

I'm in need for some help with this one, despite going through many many KB around the web, I cannot figure this out: Chrome working with ADFS 2.0 keeps prompting for credentials and will not use ...
1
vote
1answer
26 views

Sign into exchange from outlook using alias email address?

We have 2 domains. TestCenter.org and TestProject.org. Server 2012 R2 Running AD and ADFS We have an Exchange 2010 server running as well All users have an email address for the TestCenter.org. ...
0
votes
2answers
74 views

ADFS and relying party web form

We are in the process of configuring our ADFS server to allow SMAL authentication from a third party web application. We are slightly confused as listed below: We received metadata file and ...
0
votes
0answers
49 views

How to insert a CAS authentication header in the reply?

I use mod_auth_cas to authorize access to selected Location: <Location /> Authtype CAS AuthGroupFile /var/source/groups require valid-user </Location> Is there a ...
0
votes
0answers
85 views

Keycloak - restricting access to /auth

Keycloak 1.7 Standalone I have a tomcat app connected with the keycloak adapter. As soon my app is invoked it goes to keycloak sso url $KEYCLOAK_URL/auth/realms/$REALM/protocol/openid-connect/auth ...
0
votes
1answer
68 views

gssapi/kerberos/active directory/ubuntu - Wrong principal in request

I'm trying to setup a Clientserver with a Webservice to which Users of an Active Directory should be able to login with SSO. I'm using SPNEGO with Kerberos on a Ubuntu 14.04 Server and nginx proxy to ...
0
votes
0answers
29 views

SSO for hybrid browser and API authentication

My organization is testing a SAML2 environment made up of a Shibboleth Service Provider and a SimpleSamlPHP Identity Provider. The idP obtains auth information from a custom REST API (no LDAP or AD). ...
1
vote
1answer
2k views

AD FS 3.0 Event ID 364 while creating MFA (and SSO)

I have an clean installation of AD FS 3.0 installed on windows server 2012. I am trying to create MFA on my internal network using this Codeplex. AD FS Management > Authentication Policies Multi-...
1
vote
1answer
45 views

Incorrect Single Sign On Url - Cant Update

I'm having an issue. I've set up a third party SSO with my office365 account. The third party SSO authenticates with my on-premesis Active Directory. The only difference between using an ADFS on ...
1
vote
0answers
53 views

SiteMinder web agent freeze with apached 2.4 (32bit) on Windows 2012 64

I am using Apached with Siteminder for single-sign on authentication. My config is as follow: 64 bit Windows 2012 (64) R1. Apached 2.4, (32 bits) (We tried the 64 bits but it does not work with the ...
2
votes
1answer
100 views

Dynamics CRM with Windows Essentials AD + Azure AD

I'm trying to configure a new Dynamics CRM 2016 on premise installation with Claims based authentication for Sharepoint Online (Office 365) and Internet facing access. We currently have a Windows ...
0
votes
1answer
122 views

Apached + Siteminder issue

I am experiencing some very slow longin issue in my server that provide a single sign-on via Siteminder. After looking at the log. I can see the following: [15/Dec/2015:16:47:09] [Info] [CA ...
0
votes
1answer
42 views

Imitate Azure AD user/tenant claims within ADFS

I have a .Net web application that allows users to hook up their account with an identity provider (Azure AD, Google, and/or ADFS) to allow single sign-on. On hooking up their account (or "on-...
0
votes
2answers
118 views

ADFS and Shibboleth: Controlling behavior of Windows authentication

We are doing SSO using ADFS and Shibboleth SP. In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to https:/...
0
votes
1answer
155 views

Single Sign On with multiple Identity Providers from PHP web app

I'm building a SAAS web app in PHP that needs to integrate SSO. We'll have multiple client organizations, each that have their own Identity Provider (Active Directory). While researching possibilities,...
0
votes
3answers
907 views

Splunk SAML SSO from an IdP with Apache mod_mellon fails

I am trying to configure SSO from an IdP to Apache with mod_mellon and mod proxy to splunk. Environment: Ubuntu 14.04; Apache 2.4.7; mod-auth-mellon 0.7.0. Apache configured with the mellon-...
0
votes
0answers
37 views

How to use shibboleth IDP under proxy?

Say I have a java web application which is configured to work with Shibboleth identity provider. Now I'm adding some another server on dfferent host which proxies requests to java web application. ...
0
votes
1answer
39 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
0
votes
0answers
22 views

Does Azure AD SAML integration allow domain authenticated users to sign-on to Web Services without re-entering credentials?

Good Morning, I'm trying to understand the Azure AD SAML 2.0 process a little better and I have a question: If a user's on-premise Active Directory is synchronized (DirSync) with an Azure AD tenant, ...
2
votes
2answers
558 views

Using Shibboleth with ADFS doesn't work

I'm trying to familiarize myself with Shibboleth 2.5.3 and Active Directory Federation Services (tried both 2.0 and 3.0). What I'd like to achieve is having an Apache server authenticate against ADFS ...
0
votes
0answers
214 views

Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?

I have an Web application with Java EE security running in Wildfly 9 that uses Keycloak 1.4 (in a separate service) as the authentication and authorization service. I'd like to allow users logged in ...
0
votes
0answers
212 views

Can Keycloak provide SSO via Apache web service?

I'm trying to use Keycloak as an external authentication service for Alfresco (see: Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?). I've gotten no responses to ...
1
vote
2answers
73 views

How to configure Tomcat WebApp to accept credentials from Apache

I am attempting to get a web application, running in Tomcat 6, to authorize a user that was authenticated by Apache. I have configured Apache 2.4 to use Active Directory for user authentication (...
1
vote
2answers
211 views

Connect Azure Active Directory to on premise customer AD

We have a web application running in Windows Azure where a variety of customers can log in. Lately more and more of them have been asking for some sort of single sign on solution, or at least a ...
0
votes
0answers
278 views

Is it ok to disable the KCM (Kerberos Credential Cache) daemon on OS X?

I've got some issues that seems would be cleared up if I disable the KCM Daemon (it's the Kerberos Credential Cache). Is there any good reason I shouldn't? Does it break anything other than single ...
0
votes
0answers
81 views

SAML for Google Cloud Platform with no Google Apps for Business

Is there a way to use SAML SSO with google cloud platform without paying for the $10/month account fee for Google Apps for Business (Which most SAML auth with Google seems to point to)? Our ...
0
votes
0answers
171 views

Kerberos key version number mismatch in Apache, even though kvno and klist -k return the same numbers

I don't know if anyone had this issue. I am trying to implement single-sign-on through Kerberos and I get the following Apache error: [Thu Aug 13 12:08:54.219420 2015] [auth_kerb:error] [pid 1829] [...
0
votes
0answers
186 views

JBoss EAP 6.3 - SSO and Sticky Sessions not working

We have a cluster with 2 nodes (JBoss EAP 6.3 with Single Sign On enabled), node 1 and node 2 in different servers. On top of that we have an Apache2 and are using mod_cluster for load balancing and ...
0
votes
2answers
451 views

How can I use mod_auth_cas to authenticate Moodle?

What I want For various reasons, I'd like to see the following authentication procedure work: go to moodle.blah.bla Apache asks for your login information via mod_auth_cas Once authenticated, ...
2
votes
1answer
298 views

Azure AD SAML2 SSO wrong NameID format

I am trying to integrate a SaaS application with an autonomous (not federated with anything) Azure Active Directory for SSO purposes. The SaaS application (the Service Provider) is SAML2 compliant (SP-...
1
vote
0answers
323 views

SAML/OpenID authentication on Docker/Core OS

I have a set of servers running Core OS/Docker/Docker Swarm. I have my users in a SAML/OpenID SSO server. I want these users to be able to run Docker containers on my Core OS cluster. How do I ...
1
vote
1answer
1k views

Why is ADFS not passing credentials through with Integrated Windows Authentiation?

We have an ADFS 2.0 instance set up. We use it for 3rd party web app single sign-on. Everything works beautifully with the existing app, App1 with SAML 2.0, including IWA pass-through when users are ...
1
vote
0answers
191 views

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 AD2:...