Questions tagged [single-sign-on]
Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.
359
questions
0
votes
1
answer
58
views
AD password for LDAP users
My company has a central Active directory server and our team has its own OpenLDAP server for managing infrastructure. I would like to use the same password for our ldap users as the password in AD. ...
- 253
-4
votes
2
answers
8k
views
How to use multiple User login name to authenticate to AD - UPN
How can I assign multiple User login names to an AD user so he/she can authenticate seamlessly?
Here's an example:
User name 1: FJohnson
User name 2: domain\Fjohnson
User name 3: [email protected]
...
1
vote
0
answers
703
views
ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances
Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages.
We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO ...
- 21
1
vote
1
answer
2k
views
What is wrong with my SAML Response? (Office365 SSO)
I have been trying to federate an Office365 domain for some time now with no luck. I have gotten to the point in which I receive a request and am able to generate a response based off that, but don't ...
- 11
3
votes
2
answers
4k
views
Office 365 with Azure AD - can I allow SSO for another 3rd party SAML app externally?
I'm shooting a little blind here in that I'm not an Azure expert and don't really mess with it yet beyond O365 and DirSync.
We have a 3rd party app written in Ruby on Rails that they are saying is ...
- 32.8k
0
votes
1
answer
1k
views
Have ADFS 2 Prompt for Username Password
Scenario: User is at a generic workstation and needs to access a 3rd party application that is federated using ADFS 2.0. when user accesses the website it tries to auto login using the generic user ...
1
vote
2
answers
337
views
Single Sign on for Virtual Machine
Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on?
The objective is to only have to login once to the host machine and for the ...
- 455
3
votes
3
answers
22k
views
ADFS and relying party token-signing certificates
I haven't quite gotten the grasp of relying party token-signing certificate's functionality with ADFS 2.0 / 3.0. Once the automatic self-signed certificate roll-over occurs (by default), there are ...
- 149
3
votes
0
answers
67
views
Possible to import Office365 users into local active directory domain? [duplicate]
My company has an office365 setup for all employees. We also have just implemented a domain controller locally which we want to use to authenticate a few things here in the office. The problem is that ...
- 161
1
vote
0
answers
311
views
JBoss SPNEGO Authentication Renewing Server Kerberos Tickets
We have successfully configured SPNEGO with our webapp on JBoss EAP 6.2, Windows Server 2008, and IE10 using JBoss Negotiation.
What is best operational practice for renewing the ticket issued to ...
- 111
-2
votes
2
answers
1k
views
ADFS 2.0 is already configured and different application is using it, I want to use the same ADFS for my application
ADFS is already configured on servers. Different application is using it for Single Sign on.
I want to use same aDFS server to implement single sign on in my application.
Any checklist please from ...
0
votes
1
answer
770
views
ADFS only allows local browsers and Safari on one Mac to access the verification webpage
So I've setup a Windows 2012 R2 box with AD DS, SQL Server, and AD FS so one of our developers can test out SSO.
The problem is, the test webpage, https:///adfs/ls/idpinitiatedsignon, only works ...
- 1
4
votes
2
answers
5k
views
ADFS - Combining Claims from Provider Trusts and AD
As part of implementing a SharePoint 2013 installation, I have configured SSO with ADFS on Windows Server 2012R2.
There are two separate AD forests, one as part of the Hosted SharePoint/ADFS and one ...
- 383
0
votes
1
answer
98
views
Is there a way to change which wireless network is connected to when authenticating windows 7 AD clients using single sign on over wifi?
The situation:
Two domains. Two wireless networks. Each domain's users have their own network for security reasons. B is a child domain of A (A = domain.com, B = child.domain.com). Users in domain ...
0
votes
2
answers
3k
views
Apache/mod_auth_gss authentication failure
Sorry if this is the wrong stackexchange site for this.
Based upon the documentation (for reference I also used this blog post) I have this in httpd.conf:
# Increase max size of HTTP request headers ...
- 133
1
vote
2
answers
2k
views
What does "Assigned" mean in the Azure AD Application user list?
Within the Azure portal, inside an Active Tenant I have an application with users listed, of which are created in the tenant.
What does the term Assigned mean?
I incorrectly assumed that it meant ...
- 164
1
vote
2
answers
2k
views
"User with an existing Microsoft account" cannot access app using Azure AD SSO
Yesterday I followed Vittorio Bertocci's tutorial "WS-Federation in Microsoft OWIN Components – a quick start" to set up a test application using Azure AD authentication.
This is my first use of ...
- 164
0
votes
0
answers
436
views
Kerberos Authenticator Encryption Type NULL
So, I've been working on a SSO enabled XMPP application on our network for a couple weeks. I have 95% of the bugs worked out, and everything is running smoothly. The problem is that I have a couple ...
1
vote
0
answers
820
views
Partial content 206 requests on nginx behind WebAuth
I'm having a troubleshooting an issue that I think is likely due to WebAuth authentication when serving .webm videos.
The server I have is nginx 1.6.2. I can make 200 GET requests just fine. I also ...
- 111
0
votes
1
answer
312
views
JBoss - Not working the next day
We are having a problem, our JBoss EAP 6.3 cluster (2 nodes in domain mode + Apache) on a Centos OS, is not working after a period of inactivity (night). Its connected to an ldap. We do login, ...
- 11
1
vote
1
answer
1k
views
2K12 R2 ADFS 3 - IE Pass Through Authentication Fails on 2nd Login with 400
We have a customer who recently deployed ADFS 3.0 on Server 2K12 R2 as an IDP for our SaaS product (We are the SP and we use SimpleSAMLPHP). This customer is our first ADFS 3.0 customer, but we have ...
- 11
0
votes
1
answer
4k
views
Configuring kerberos/ntlm single signon with apache and sssd
What is the proper/cleanest way of setting up apache to support SSO using NTLM, or preferably Kerberos, with CentOS7 running sssd connected to an Active Directory domain controller?
With realmd, ...
- 318
1
vote
2
answers
340
views
ADFS Metadata with Active Directory Attributes
Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system.
When I view the ...
- 257
2
votes
2
answers
7k
views
ADFS 2.0 on Windows Server 2012 R2
Wanted to know if ADFS 2.0 can be installed on Windows Server 2012? The below link says it can be installed and gives command to install but that command fails throwing the error 'ad-federation-...
- 23
0
votes
0
answers
952
views
Smart Card Logon & next hop SSO RDP Login
I started to expriement with smart card based login. So far I can logon to my local PC using my smart card.
What doesn't work is using sso when connecting via RDP to another server. I get the error ...
- 575
8
votes
2
answers
3k
views
Is single sign on with LDAP still recommended today to integrate a bunch of open source tools?
We are leading an exercise with a public institution to install different open source tools for them to experiment and see what suits them most.
Thus, we are installing:
a wiki (dokuwiki)
...
0
votes
1
answer
300
views
Intranet AD login for External Website
Is it possible to setup a website on the internet such that it does a Single Sign for people coming from intranet Active Directory logins? If this is possible, are there any products/tools which help ...
- 285
3
votes
1
answer
14k
views
problems creating a keytab file on win server
I am trying to create a keytab file. i see a warning
WARNING: pType and account type do not match. This might cause problems.
The command i use is
ktpass -princ HTTP/bloodhound.domain.com@...
- 351
0
votes
0
answers
833
views
Browser (SPNEGO) kerberos authentication on Windows Phone 8 IE
Is there a way to make Internet Explorer on Windows Phone 8 authenticate to a site using Windows Integrated Security Authentication with Kerberos through the Negotiate (SPNEGO) protocol?
It seems to ...
- 109
2
votes
1
answer
1k
views
Single Sign-On and Active Directory Federation (ADFS)
Can anyone please tell me, what is the difference between active directory federation services (ADFS) and single sign-on (SSO)?
From a simple look at things both seem to do much the same thing in ...
- 21
1
vote
0
answers
782
views
vSphere 5.1 SSO upgrade issue
I´m having issues upgrading VMware vSphere Infrastructure from 5.1.0.1123961 to 5.1.1474365.
First I ran into the issue described in the VMware KB 2046318 (Installing vCenter Single Sign-On fails ...
- 93
0
votes
1
answer
2k
views
Citrix Netscaler 10.1 AAA Application Traffic Single Sign On
I have a Netscaler deployment with a virtual server where I have enabled authentication through the AAA Application Traffic feature. As Expected this allows my users to log on to the netscaler login ...
- 87
-1
votes
1
answer
531
views
set SAML request for Office 365 Single Sign On
i am trying to set up single sign on for office 365 for my domain using my own identity provider. i have configured the domain to get to the login page of my identity provider whenever a user types in ...
- 11
1
vote
0
answers
607
views
Add single sign-on into existing web app
Apologies if this isn't the best site, I've search for an answer but can't find anything quite right. I don't actually know the correct terminology I should be using here, so any pointers will be ...
- 164
1
vote
0
answers
2k
views
Windows SSO-Login only working once in Internet Explorer 11
We're about to migrate our users from Internet Explorer 8 to version 11. While testing the IIS-Windows-Authentication, I noticed that it does work, but it will only work once.
I can press the ...
- 111
2
votes
1
answer
3k
views
ADFS SSO - LDAP Attributes as Claims - UPN as NameID - NameID Missing from SAML Response for users whose UPN is changed
ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS.
Claim Rule Template: Send LDAP Attributes as Claims
Claim Rule Name: Send the UPN as NameID
LDAP Attribute:...
4
votes
2
answers
4k
views
Open Directory and SAML Identity Provider
Our office has switched almost entirely from Windows to Mac OS X, and our local server is due for replacement. We use Active Directory basically just for user authentication. We're considering ...
- 213
3
votes
2
answers
6k
views
Linux SSO for multiple windows domains
I have successfully implemented SSO on apache for windows users in the same AD domain that the apache server is in:
AD domain = example.com
Linux server = linux.example.com
KDC = ad.example.com
I ...
0
votes
2
answers
2k
views
apache2.2 with mod_auth_kerb SSO: how to fallback to same directory when user can't authenticate
i implement an intranet CMS (Joomla 2.5) in a multidomain environment, logging them in with kerberos against Windows AD -> SSO. SSO with kerberos works perfect for the integrated domains, also the SSO ...
- 1
1
vote
1
answer
1k
views
Apache authenticate against AD - some use DOMAIN\\username, others username
I have Request Tracker setup on a Ubuntu 12.04 server. It is configured to authenticate against active directory through winbind.
Here's the relevant portion of the apache2 configuration:
...
- 18k
5
votes
1
answer
1k
views
Single Sign On and NFS permissions on Windows
Like many, I've been trying to move away from Microsoft Active Directory + CIFS file sharing into a custom LDAP solution + NFSv4. All the workstations here run Windows 7, and I have set up the ...
- 201
0
votes
1
answer
110
views
Apache SSO for a service that runs as local user
I am trying to move the web layer of our app onto Apache on Centos and use mod_auth_kerb to authenticate AD users and automatically log them in the app.
I have successfully joined the domain, and can ...
2
votes
3
answers
7k
views
REMOTE_USER variable without @DOMAIN suffix
I administer an application that enables single sign on with valid AD users and runs on IIS currently.
For performance increase, I have a task to migrate the web layer to Apache/Php on Linux.
I have ...
1
vote
1
answer
2k
views
ADFS 2.0 Best Practices
I'm having a hard time finding some good articles on best practices for ADFS. We are looking to implement SSO for less than 200 users. We plan on setting up a federated server farm (2 servers) ...
- 168
0
votes
0
answers
170
views
Does mod_auth_sspi require Tomcat?
I've tried setting up mod_auth_sspi, but have not managed to get SSO working.
I then realised that this may be because my stack (Uniform Server 8.2) doesn't include Tomcat. I read somewhere some ...
- 41
2
votes
0
answers
587
views
Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients
I've inherited a system that may have never been fully integrated as it could have been.
We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
- 328
-1
votes
1
answer
335
views
How to integrate Question2Answer into Typo3?
Question2Answer provides the option to implement Single Sign On. I want to integrate it into an existing installation of Typo3 (for Typo3 front end users). The questions I have:
Do I need a certain ...
- 103
2
votes
1
answer
3k
views
$_SERVER['REMOTE_USER'] not found using LDAP SSO
Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
- 41
0
votes
0
answers
1k
views
Generating XML SAML with signature using xmlsec1
I am trying generate XML SAML with signature to SSO, but I have a problem and I don't know what is wrong. I don't have experience with Linux. I generated privkey and cacert with lib openssl.
Next ...
1
vote
0
answers
49
views
Suitability of SAML for use case
A user logs into our portal - site 1;
We want them to be able to click through to other sites 2 and 3 within our eco-system without having to further login - so no popup box to verify they have ...
- 121