Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

learn more… | top users | synonyms (1)

0
votes
0answers
29 views
+50

AD FS 3.0 Event ID 364 while creating SSO

I have an clean installation of AD FS 3.0 installed on windows server 2012. I am trying to create MFA on my internal network using this Codeplex. AD FS Management > Authentication Policies ...
1
vote
1answer
13 views

Incorrect Single Sign On Url - Cant Update

I'm having an issue. I've set up a third party SSO with my office365 account. The third party SSO authenticates with my on-premesis Active Directory. The only difference between using an ADFS on ...
1
vote
0answers
13 views

SiteMinder web agent freeze with apached 2.4 (32bit) on Windows 2012 64

I am using Apached with Siteminder for single-sign on authentication. My config is as follow: 64 bit Windows 2012 (64) R1. Apached 2.4, (32 bits) (We tried the 64 bits but it does not work with the ...
2
votes
1answer
36 views

Dynamics CRM with Windows Essentials AD + Azure AD

I'm trying to configure a new Dynamics CRM 2016 on premise installation with Claims based authentication for Sharepoint Online (Office 365) and Internet facing access. We currently have a Windows ...
0
votes
1answer
35 views

Apached + Siteminder issue

I am experiencing some very slow longin issue in my server that provide a single sign-on via Siteminder. After looking at the log. I can see the following: [15/Dec/2015:16:47:09] [Info] [CA ...
0
votes
1answer
23 views

Imitate Azure AD user/tenant claims within ADFS

I have a .Net web application that allows users to hook up their account with an identity provider (Azure AD, Google, and/or ADFS) to allow single sign-on. On hooking up their account (or ...
0
votes
2answers
23 views

ADFS and Shibboleth: Controlling behavior of Windows authentication

We are doing SSO using ADFS and Shibboleth SP. In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to ...
0
votes
1answer
54 views

Single Sign On with multiple Identity Providers from PHP web app

I'm building a SAAS web app in PHP that needs to integrate SSO. We'll have multiple client organizations, each that have their own Identity Provider (Active Directory). While researching ...
0
votes
3answers
152 views

Splunk SAML SSO from an IdP with Apache mod_mellon fails

I am trying to configure SSO from an IdP to Apache with mod_mellon and mod proxy to splunk. Environment: Ubuntu 14.04; Apache 2.4.7; mod-auth-mellon 0.7.0. Apache configured with the ...
0
votes
0answers
17 views

How to use shibboleth IDP under proxy?

Say I have a java web application which is configured to work with Shibboleth identity provider. Now I'm adding some another server on dfferent host which proxies requests to java web application. ...
0
votes
1answer
33 views

Linux LDAP to Ldapadmin configuration issues

I'm learning how to setup and use OpenLDAP installed on an Ubuntu server. I executed sudo apt-get install slapd ldap-utils -y and set my ldap domain to test.mydomain.com. I can execute ldapadd ...
0
votes
0answers
16 views

Does Azure AD SAML integration allow domain authenticated users to sign-on to Web Services without re-entering credentials?

Good Morning, I'm trying to understand the Azure AD SAML 2.0 process a little better and I have a question: If a user's on-premise Active Directory is synchronized (DirSync) with an Azure AD tenant, ...
0
votes
2answers
81 views

Using Shibboleth with ADFS doesn't work

I'm trying to familiarize myself with Shibboleth 2.5.3 and Active Directory Federation Services (tried both 2.0 and 3.0). What I'd like to achieve is having an Apache server authenticate against ADFS ...
0
votes
0answers
137 views

Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?

I have an Web application with Java EE security running in Wildfly 9 that uses Keycloak 1.4 (in a separate service) as the authentication and authorization service. I'd like to allow users logged in ...
0
votes
0answers
91 views

Can Keycloak provide SSO via Apache web service?

I'm trying to use Keycloak as an external authentication service for Alfresco (see: Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?). I've gotten no responses to ...
1
vote
2answers
52 views

How to configure Tomcat WebApp to accept credentials from Apache

I am attempting to get a web application, running in Tomcat 6, to authorize a user that was authenticated by Apache. I have configured Apache 2.4 to use Active Directory for user authentication ...
1
vote
2answers
119 views

Connect Azure Active Directory to on premise customer AD

We have a web application running in Windows Azure where a variety of customers can log in. Lately more and more of them have been asking for some sort of single sign on solution, or at least a ...
0
votes
0answers
110 views

Is it ok to disable the KCM (Kerberos Credential Cache) daemon on OS X?

I've got some issues that seems would be cleared up if I disable the KCM Daemon (it's the Kerberos Credential Cache). Is there any good reason I shouldn't? Does it break anything other than single ...
0
votes
0answers
58 views

SAML for Google Cloud Platform with no Google Apps for Business

Is there a way to use SAML SSO with google cloud platform without paying for the $10/month account fee for Google Apps for Business (Which most SAML auth with Google seems to point to)? Our ...
0
votes
0answers
111 views

Kerberos key version number mismatch in Apache, even though kvno and klist -k return the same numbers

I don't know if anyone had this issue. I am trying to implement single-sign-on through Kerberos and I get the following Apache error: [Thu Aug 13 12:08:54.219420 2015] [auth_kerb:error] [pid 1829] ...
0
votes
0answers
129 views

JBoss EAP 6.3 - SSO and Sticky Sessions not working

We have a cluster with 2 nodes (JBoss EAP 6.3 with Single Sign On enabled), node 1 and node 2 in different servers. On top of that we have an Apache2 and are using mod_cluster for load balancing and ...
0
votes
1answer
241 views

How can I use mod_auth_cas to authenticate Moodle?

What I want For various reasons, I'd like to see the following authentication procedure work: go to moodle.blah.bla Apache asks for your login information via mod_auth_cas Once authenticated, ...
0
votes
0answers
53 views

Error deploying VMware Integrated Openstack OVF on vCenter 6

I'm trying to deploy an OVF from VMware Integrated Openstack at my vCenter 6, but now it was showing an "Operation time out" message. Before, it was showing the message "the operation is not allowed ...
2
votes
1answer
137 views

Azure AD SAML2 SSO wrong NameID format

I am trying to integrate a SaaS application with an autonomous (not federated with anything) Azure Active Directory for SSO purposes. The SaaS application (the Service Provider) is SAML2 compliant ...
1
vote
0answers
176 views

SAML/OpenID authentication on Docker/Core OS

I have a set of servers running Core OS/Docker/Docker Swarm. I have my users in a SAML/OpenID SSO server. I want these users to be able to run Docker containers on my Core OS cluster. How do I ...
1
vote
1answer
590 views

Why is ADFS not passing credentials through with Integrated Windows Authentiation?

We have an ADFS 2.0 instance set up. We use it for 3rd party web app single sign-on. Everything works beautifully with the existing app, App1 with SAML 2.0, including IWA pass-through when users are ...
0
votes
0answers
32 views

Apache2.2 Mod:mod_auth_sspi with cross domain

I've setup Apache 2.2 with mod_auth_sspi 1.0.4 on Windows Server 2012 R2 and try to authenticate on our PHP website from the server in domainA to the domain controller in domainB. This is the sspi ...
1
vote
0answers
120 views

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 ...
0
votes
2answers
414 views

Apache 2.2 mod_auth_kerb SSO stopped working

I'm all out of ideas why has it just stopped working, here's what I checked: httpd-error.log: [Thu Jun 11 18:04:21 2015] [debug] src/mod_auth_kerb.c(1758): [client 10.105.5.131] ...
4
votes
0answers
271 views

Windows Authentication to a Remote Server within an Intranet Environment

I have several servers (all on the same DC) within an Intranet environment at my company. For simplicity, I'll focus my question on the IIS and SQL Servers. I have an IIS 7.5 web server and a remote ...
0
votes
1answer
254 views

Reverse Proxy single sign-on

I have a reverse proxy handling ssl termination and mod_security. The issue is after sso reaches the backend server it tries to authenticate with cas directly instead of the through the proxy still, ...
0
votes
1answer
172 views

Kerberos SSO virtualhost different domain

I have a running centos6.6 server who authenticates against a windows 2008 AD with realm EXAMPLE.LOCAL. I have successfully configured an apache webserver for authentication through kerberos keytab ...
0
votes
0answers
140 views

OpenAM 12.0 IDP SOAP based SLO not working on https

I am trying to configure OpenAM with my own certificate having alias other than "test" as per the document http://docs.forgerock.org/en/openam/12.0.0/admin-guide/index/chap-certs-keystores.html over ...
2
votes
1answer
170 views

Group Policy and Internet Explorer's Site to Zone assignment issues?

We are using GPO to apply Site to Zone assignements for our users so that we can add some specific addresses into their Internet Explorer's Intranet and Trusted zones. Using the Site to Zone GPO ...
1
vote
1answer
66 views

Office 365 SSO presenting two signon boxes when using ADFS Proxies

I have the following setup- we use an external, third-party load balancer to forward traffic to one of our two ADFS Proxies (in the DMZ) which in turn forward to one of our two ADFS servers. ...
2
votes
2answers
236 views

IBM WebSphere Application Server SSO does not set REMOTE_USER on Cognos BI 10.2.2

Very similar issue was posted here, I do not believe they are the same. IBM WebSphere Application Server SSO sets REMOTE_USER incorrectly We are running IBM Cognos Business Intelligence Server ...
2
votes
1answer
121 views

vSphere/vCenter not offering SSO options

We started setting up a vSphere infrastructure and want to use OpenLDAP as authentication source. In the vCenter, we have enabled the embedded SSO server and I find options to connect to Active ...
3
votes
3answers
342 views

Single sign on with Apache and LDAP

I have a server running two web applications: Gerrit and Mantis BT. Now, these applications connect to an LDAP server to authenticate users and it works fine. But the user has to authenticate for each ...
1
vote
1answer
61 views

SSO while still allowing offline use?

I am thinking of implementing Single Sign-On for a whole company. PROBLEM: Some employees of that company need to be able to work offline, without having to switch user/environment. Is there any ...
0
votes
0answers
172 views

IBM WebSphere Application Server SSO sets REMOTE_USER incorrectly on Cognos BI 10.2.1

I am running IBM Cognos Business Intelligence Server 10.2.1 (no other extra software products) on WebSphere Application Server 7, both softwares on an AIX server. I am trying to configure LTPA SSO ...
0
votes
1answer
842 views

php REMOTE_USER variable

I am trying to setup mediawiki with SSO. I was able to set up authentification with domain, but I cannot setup SSO. For some reason, $_SERVER['REMOTE_USER'] variable is not set. I looked into some ...
0
votes
1answer
33 views

AD password for LDAP users

My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
-4
votes
2answers
544 views

How to use multiple User login name to authenticate to AD - UPN

How can I assign multiple User login names to an AD user so he/she can authenticate seamlessly. Here's an example: User name 1: FJohnson User name 2: domain\Fjohnson User name 3: FJohnson@domain.com ...
1
vote
0answers
164 views

ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances

Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages. We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
1
vote
1answer
478 views

What is wrong with my SAML Response? (Office365 SSO)

I have been trying to federate an Office365 domain for some time now with no luck. I have gotten to the point in which I receive a request and am able to generate a response based off that, but don't ...
2
votes
1answer
455 views

Office 365 with Azure AD - can I allow SSO for another 3rd party SAML app externally?

I'm shooting a little blind here in that I'm not an Azure expert and don't really mess with it yet beyond O365 and DirSync. We have a 3rd party app written in Ruby on Rails that they are saying is ...
0
votes
0answers
369 views

How do I configure Azure Active Directory to provide Windows Authentication in multi-tenant IIS ASP.NET web apps?

I have been doing some tests with Azure Active Directory trial license in my data center. Our company has our own hosting services and physical hardware, and for now we would like to keep it that way ...
0
votes
1answer
273 views

Have ADFS 2 Prompt for Username Password

Scenario: User is at a generic workstation and needs to access a 3rd party application that is federated using ADFS 2.0. when user accesses the website it tries to auto login using the generic user ...
1
vote
1answer
42 views

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the ...
0
votes
0answers
29 views

VCenter and SSO Database

We are using external dedicated Database Server During VCenter SSO installation RSA Database got created using the script (RSA_DATA.mdf,RSA_INDEX.ndf,translog.ldf)and pointed the SSO to it Now During ...