Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Filter by
Sorted by
Tagged with
0 votes
0 answers
30 views

Using proxy with another SSL certificate when connecting to app

There is an app that has configured a SSO throughout Keycloack server (Keycloack is mine). Let's assume that you can reach the app via https://www.example.domain.com. Now, I don't have access to the ...
PastorPL's user avatar
  • 101
0 votes
0 answers
19 views

ADFS Single Logout both OAuth/OpenID and SAML federated clients

I am trying to set up ADFS as a single sign-on identity provider for various apps. Some of these apps work with only SAML identity providers while others only work with OAuth/OpenID. It seems like I ...
ieatpizza's user avatar
  • 113
0 votes
0 answers
9 views

Where is the proper place to save the authentication token in SSO scenarios?

Caddy web server has a forward_auth directive, that as the name suggests, can forward any incoming request to an outside source and that outside source can decide on whether to accept the request and ...
wiki's user avatar
  • 503
0 votes
0 answers
70 views

Openstack Keystone as a Service Provider, 401 - Unauthorized Exception for SSO

We're currently working on implementing SSO for our university's OpenStack environment using OpenStack Ansible (Yoga version). Our goal is to allow students to log in with their university credentials ...
Joel 35's user avatar
1 vote
1 answer
284 views

AD FS Access Control Policy to permit specific groups and require MFA

We use an on-premise AD FS server (currently on Windows Server 2019), with several "relying party" applications. This is connected to local Active Directory, which in turn syncs to an Azure ...
Joel Coel's user avatar
  • 13k
0 votes
1 answer
64 views

Is there a solution to manage users in some systems or at least in linux?

I work somewhere with a lot of Linux and VPS servers. When someone joins the company, other staff members need to add his SSH key to each server; conversely, if someone leaves, all of his SSH keys ...
Mohammad Mahdi's user avatar
1 vote
0 answers
726 views

SSO not working between a browser and a Keycloak using an user federation with kerberos integration to a windows AD

I am trying to get SSO working using a browser(Chrome or firefox) and keycloak configured with an user federation AD Domain(kerberos is configured). First I present the overview of what I have and ...
Afonso R.'s user avatar
0 votes
0 answers
183 views

Is there a way to add SAML-based SSO to an unauthenticated application I am hosting?

I am running an application that doesn't have authentication built-in. I would like to require Google SSO with SAML as a way for users to be allowed to use the application. I am looking for any advice ...
Addison's user avatar
  • 101
1 vote
0 answers
242 views

Configuring cyrus to use oauth2 via keycloak with ldap backend?

We are using cyrus (and exim) as a long-running mail server. The requirement to store passwords in email programs seems to be a security risk to me. I would like to move auth behind something like ...
till's user avatar
  • 121
2 votes
0 answers
152 views

Looking for a good beginners guide for SSO and HAProxy (keyloak, authelia..)

Im using haproxy now for several years and im very happy... (After i experienced with traefik...) Now i want to put some of my docker-microservices (hedgedoc etc) in the internet. But i want to have ...
mylan's user avatar
  • 51
0 votes
0 answers
61 views

applying Nginx SSO with authorization to selected subdomains

I need an open source SSO tool integrated with Nginx like authelia. It must be able to manage users' access to different sites. For example, the "s.com" domain is protected by SSO. This ...
user avatar
0 votes
1 answer
116 views

Unable to setup SAML with internal IdP (SP is checking for valid URL)

I've been reading through the various ways to configure an IdP/SP relationship and going back forth with a vendor I'm setting up our IdP to authenticate with. We've exchanged metadata and the ...
ceskib's user avatar
  • 761
-1 votes
1 answer
101 views

Why does AWS Cognito require a client secret when configuring an external IdP (Azure AD)?

I don't understand why AWS Cognito require a client secret when configuring an external IdP (e.g. Azure AD). AFAIK, AWS Cognito merely forwards federated identities to the external IdP for (OIDC) ...
Shuzheng's user avatar
  • 429
0 votes
0 answers
38 views

Do I need an ADFS and Proxy?

The client has an ADFS server and they use our APP hosted on IIS developed on Dot Net. How Do I set UP ADFS - do I need ADFS Proxy server as well, Can I use an existing AD server and install ADFS, we ...
DisplayName's user avatar
1 vote
0 answers
269 views

AD FS 3.0 SSO issue in Outlook Desktop Application with Modern Auth for MS365

I have installed and configured AD FS services on a Microsoft Windows Server 2016 Standard. Through Azure AD Connect we were able to configure our domain as a federated domain on our Microsoft 365 ...
eKKiM's user avatar
  • 1,539
0 votes
0 answers
68 views

How can I debug a 'KidNotFound' error when implimenting GitLab SSO with Azure AD as IdP?

I am trying to integrate our self-managed GitLab 15.9.3-ee instance with our Azure AD. Using Azure AD as the IdP for SSO in to GitLab, I have been using the documentation here: https://docs.gitlab.com/...
MrRed's user avatar
  • 11
1 vote
1 answer
439 views

Setup SSO : openldap, kerberos, nfs(truenas) :

Currently I am able to setup a SSO NFS setup with openldap ldap server and Truenas NFS server (with LDAP access configured). The ubuntu clients are able to use pam-mount to mount the nfs home shares. ...
tachy's user avatar
  • 13
0 votes
1 answer
216 views

Azure AD B2C on backend or front end?

I have a service oriented application where the fornt end is a NextJs application and the backend is a .net core API project. I want to use Azure AD B2C to provide Authentication. Should I configure ...
demu's user avatar
  • 1
0 votes
1 answer
2k views

ADFS Client Certificate Authentication

I have ADFS on my environment and it's currently authenticating via active directory perfectly fine. I'm trying to enable certificate authentication so they can authenticate with their smart cards. ...
Mlsracer's user avatar
-1 votes
1 answer
494 views

Azure AD B2C use case - SSO between 2 applications

I have 2 applications . Application 1 : A .NET backend / Angular frontend app with AD B2C for authentication. (This application is already developed and working.) Application 2 : A similar stack ...
user14013917's user avatar
2 votes
0 answers
255 views

Implement SSO between a custom app and Microsoft 365 with custom identity provider

I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn't ask for credentials. Context: ADFS ...
Eduard Paul Lakida's user avatar
1 vote
0 answers
590 views

Microsoft-Account authentication issues after Office365 organization join

Years ago I registered my domain for Windows Live Domains (domains.live.com) and created 5 accounts for me and my family (@mydomain.tld). These email-adresses are our primary addresses and also ...
Dave Mar's user avatar
0 votes
0 answers
506 views

Authentication Uses NTLM instead of Kerberos

We have transfered our site (httpd+nginx+php) from simple host with 3 containers to kuber cluster. And after that for some reason SSO has stopped working. Kerberos and samba configs are the same, AD ...
Rumotameru's user avatar
0 votes
0 answers
877 views

Apache with SSO and group-based authentification

I would like to configure SSO in Apache incl. group-based authentication. It means that users, who are a member of a particular group, should be able to log in to the website without entering the ...
honeybee's user avatar
1 vote
2 answers
97 views

Possible ways of enabling SSO in Active Directory / Azure Active Directory

I saw in some videos that the recommendation today is to avoid using ADFS for SSO. I would like to confirm that statement and to know what are all the possible ways to enable SSO without using ADFS in ...
Adam Kejji's user avatar
2 votes
0 answers
1k views

Single Sign on (SSO) not working on Firefox

Could it be that Firefox doesn’t support all windows NTLM SSO scenarios on a Sharepoint Site via adfs? Login attempts into Sharepoint site just gets stuck on the login page and nothing happens ...
john zuh's user avatar
0 votes
0 answers
341 views

Azure AD app registration - possible to modify or transform email claim provided by OIDC SSO?

We have two instances of a SaaS app from a vendor that have SSO capabilities using OIDC. Our app users are differentiated based on the provided email address when logging in using the login page ...
Micah Yeager's user avatar
0 votes
0 answers
683 views

Apache2 SSO mod_auth_kerb An unsupported mechanism was requested

I am using a Windows 2022 Server running the active directory (server.local) and a Debian 10 Server running Apache. When accessing the Site with Chrome or Internet Explorer it returns a 401 Status ...
dwaltsch's user avatar
0 votes
1 answer
1k views

Issues configuring SAML authentication in Apache Guacamole behind a HAProxy

I've deployed an Apache Guacamole server and trying to configure SSO using SAML with a Cloud IdaaS. HAproxy is in front of the Guacamole server, providing SSL offloading. Apache Guacamole was ...
user1913559's user avatar
0 votes
1 answer
599 views

Single Signon best practice for phpMyAdmin across multiple servers

I run a small web development company and we run multiple production servers, each with their own MySQL database server. I'm trying to figure out the best way of giving access to these separate MySQL ...
james-geldart's user avatar
1 vote
1 answer
2k views

Azure AD Kerberos decryption key rollover; new-azureADSSOAuthenticationContext; using token instead of pscredential

We do the 30 days kerberos decryption key rollover process automated by using an "encrypted" password stored within a text file to create the neccessary PSCredential object for the ...
John Ranger's user avatar
0 votes
0 answers
43 views

Is it possible to add Google single sign on to specific 365 users, NOT the whole tenant?

We've got a client with a satellite office outside of the US, and it's not connected to their AD server. As such, changes to their 365 passwords are not synced like the home office does, and it gets ...
NC666's user avatar
  • 1
0 votes
1 answer
236 views

basic understandig about kerberos sso in apache

I'm trying to configure kerberos sso in apache at the moment. On the test server the website sub.internal.local workes quite well in reference to the kerb sso. When I try to adopt the config to ...
horst's user avatar
  • 1
0 votes
1 answer
173 views

OpenCms: Kerberos SSO authentication with httpd+Tomcat

I have a standalone httpd+Tomcat 8.5.65 installation on OpenJDK 11 with OpenCms 11.0.2 for my client's internal website. They have a LDAP network and they're requesting the automated logon using ...
user3804769's user avatar
1 vote
0 answers
2k views

Apache reverse proxy with Kerberos authenticate and LDAP authorization

Server version: Apache/2.4.37 (Red Hat Enterprise Linux) Apache is launched as a container in the Openshift cluster. I am using Apache as a forward and reverse proxy for Kibana. Mandatory requirement ...
Andrew's user avatar
  • 11
0 votes
0 answers
423 views

Login to SSL VPN via SSO and then use SSO inside VPN for other Service Providers possible?

I have a setup where you authorize via SAML SSO (keycloak as idp) to access a SSL VPN (fortigate as sp). Now inside the VPN there are authorization reverse proxy servers. Is it possible to have the ...
cu 29p's user avatar
  • 1
1 vote
1 answer
266 views

Does Windows SSO work with ADFS 2016 for OIDC Web Application?

Our web application uses OpenID-Connect (OIDC) Implicit Flow for user login with ADFS 2016. Login generally works, however users get login screen for user name and password. Does Windows-Login / SSO (...
Vilmantas Baranauskas's user avatar
0 votes
2 answers
372 views

ADFS as proxy to some IDP

As far as I know, Exchange does support WS-Federation, but it does not support SAML. At the same time I have IDP that does support SAML, but does not support WS-Federation. Is it possible to configure ...
Oleksii's user avatar
  • 145
0 votes
1 answer
4k views

SAML 2.0 NameIDPolicy that was not satisfied by the issued token

I am working on a SAML integration with some monitoring software, but I keep receiving the MSIS7070 error below. I have tried numerous transform combinations with no luck. I am certain this is ...
Chris Lombardi's user avatar
1 vote
0 answers
988 views

AWS SSO: Should I use Permission Sets or IAM Roles, or Both?

We have AWS accounts for dev, staging, and prod. We use AWS SSO via Okta, and define groups like "Developers" and "Support" in Okta. Developer group should have broad access to ...
Tom Harrison Jr's user avatar
1 vote
0 answers
735 views

Office 365 with SSO, but needs email to be accessed via POP and send mails via SMTP

We are moving from Godaddy to Office 365. Many of our staff use Thunderbird and a few use Gmail to read office emails (collection emails via POP). Office 365 uses SSO by OneLogin to authenticate users....
Mathew Paret's user avatar
1 vote
0 answers
946 views

Linking authentication FreeIPA and SSO

Long story short, my goal is to have all user permissions managed in one place and then deployed everywhere. My thoughts are that Active Directory/FreeIPA is perfect for this sort of thing. It also ...
CuriousGeorge's user avatar
0 votes
1 answer
1k views

What is the proper way to use IIS to forward the REMOTE_USER header to Tomcat?

I am trying to set up SSO with IIS 10 and Tomcat 9. I want to use Windows Authentication in IIS and pass the authenticated username to Tomcat. I had this working with Tomcat 8.5, however after ...
Ryan's user avatar
  • 111
1 vote
0 answers
163 views

How to configure the apache authorization chain for Kerberos (mod_auth_kerb) and SSL?

What directives and conditions to configure the Apache configuration as follows: We try to authorize through Kerberos. If successful (What condition to use?), Then we redirect to URL1. Otherwise, we ...
Александр Беляков's user avatar
-1 votes
1 answer
206 views

With Microsoft 365 SSO. Delete user in third-party App when such user gets deleted in Active Directory

I have an application connected to Microsoft Active Directory using SSO. So basically users in the third-party App authenticate with Microsoft 365 using SSO however we would like to delete a user in ...
QLands's user avatar
  • 119
1 vote
0 answers
672 views

Why isn't Kerberos used for SSO to cloud apps?

When comparing Kerberos to SAML, a common argument on StackOverflow sites and the rest of Internet is that SAML is for Internet / cloud applications while Kerberos is for enterprise LAN. There are ...
Ryan's user avatar
  • 197
1 vote
0 answers
72 views

Integrating GitHub Org with SAML shibboleth & post actions

I am at the beginner level of GitHub cloud administration and looking for answers to the below-listed questions after I enable SAML integration (Shibboleth) for my Github cloud Organisation. Before ...
rgh's user avatar
  • 11
0 votes
0 answers
361 views

IIS: Kerberos authentication only works from local machine

I'm setting up an IIS application on a server within my domain. I configured SPN's and settings to allow windows authentication to work with kerberos and Single Sign On, and everything works fine on ...
עומר אנגי's user avatar
-1 votes
1 answer
49 views

how we can generate the single sign on and reply url for new application in azure active directory

I am going to register a new application in the Azure active directory for SAML login. How can I generate my reply URL and single sign on url and entity ID ?
user618241's user avatar
1 vote
1 answer
212 views

graviteeio - management-rest-api oauth role mappings

Gravitee manager can be configured with keycloak authentication as described here. They state in their documentation, that role mapping could be addressed on their gravitee.yml configuration: security:...
Patricio's user avatar

1
2 3 4 5
8