Questions tagged [single-sign-on]
Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.
144
questions with no upvoted or accepted answers
4
votes
0
answers
2k
views
Windows Authentication to a Remote Server within an Intranet Environment
I have several servers (all on the same DC) within an Intranet environment at my company. For simplicity, I'll focus my question on the IIS and SQL Servers. I have an IIS 7.5 web server and a remote ...
- 620
4
votes
0
answers
10k
views
Server not found in Kerberos database while getting credentials for imap
When running kvno imap/[email protected] get the following error:
kvno: Server not found in Kerberos database while getting credentials for imap/[email protected]
...
- 131
4
votes
1
answer
805
views
Intranet corporate SSO for webapps against Active Directory
I am trying to plan and implement a SSO solution in a corporate environment that serves intranet web applications running on CentOS:
Corporate portal (Drupal backend)
Project management (Project.NET)
...
- 41
4
votes
0
answers
626
views
Single Sign On through Citrix
I have a webserver running Windows 2008 R2 with IIS 7. The server is a member of the domain "mydomain.com". What I am trying to achieve is a SSO connection between the AD users and the web server. The ...
- 141
3
votes
1
answer
2k
views
how authenticated multiple subdomains in nginx with one login
we've got app consisting of several parts. Each part is running on it's subdomain (nginx site). We would like to hide access of dev env behind some shared auth, where first login on whatever of ...
- 31
3
votes
2
answers
2k
views
Using Google Apps / G Suite as IdP for Office365
I'm trying to set up SAML SSO where G Suite is the identity provider for Office 365 (service provider).
Google's instructions are limited: https://support.google.com/a/answer/6363817?hl=en
But I ...
- 31
2
votes
0
answers
174
views
Looking for a good beginners guide for SSO and HAProxy (keyloak, authelia..)
Im using haproxy now for several years and im very happy... (After i experienced with traefik...) Now i want to put some of my docker-microservices (hedgedoc etc) in the internet. But i want to have ...
- 51
2
votes
0
answers
265
views
Implement SSO between a custom app and Microsoft 365 with custom identity provider
I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn't ask for credentials. Context:
ADFS ...
2
votes
0
answers
1k
views
Single Sign on (SSO) not working on Firefox
Could it be that Firefox doesn’t support all windows NTLM SSO scenarios on a Sharepoint Site via adfs? Login attempts into Sharepoint site just gets stuck on the login page and nothing happens ...
- 51
2
votes
1
answer
6k
views
Keycloak x.509 certificate authentication
I'm trying to set up the following architecture but I'm struggling:
Keycloak container with this image jboss/keycloak:7.0.0
Apache with mod_auth_openidc
The apache has a protected directory
Apache ...
- 121
2
votes
0
answers
4k
views
How to download SAML XML metadata from Microsoft Azure
I have an enterprise application that implements SAML SSO, and I have a new client who wishes to use it. This feature works with other clients. However, the application requires that the client ...
- 21
2
votes
1
answer
2k
views
Kerberos Ticket Hand-off No Good on Chrome on macOS X
I am implementing Okta as a single-sign on provider in an enterprise environment of about 90 users. One of Okta's features is Desktop Single Sign On - the ability for users to be authenticated with ...
- 21
2
votes
0
answers
300
views
Mapping GSuite custom attribute value via Groups
So, I have followed instruction here:
https://aws.amazon.com/blogs/security/how-to-set-up-federated-single-sign-on-to-aws-using-google-apps/
On how to set up AWS SSO via GSuite.
My issue is, I need ...
- 523
2
votes
0
answers
139
views
Is it possible to sign into Chrome Browser from a users OS authentication?
I am curious if it would be possible to sign users into their Chrome Browsers on Windows and/or Mac automatically when they sign in to their AD account.
Our G Suite account syncs all data from our AD ...
- 255
2
votes
0
answers
1k
views
SAML/OpenID authentication on Docker/Core OS
I have a set of servers running Core OS/Docker/Docker Swarm.
I have my users in a SAML/OpenID SSO server. I want these users to be able to
run Docker containers on my Core OS cluster.
How do I ...
2
votes
2
answers
776
views
IBM WebSphere Application Server SSO does not set REMOTE_USER on Cognos BI 10.2.2
Very similar issue was posted here, I do not believe they are the same.
IBM WebSphere Application Server SSO sets REMOTE_USER incorrectly
We are running IBM Cognos Business Intelligence Server 10.2....
- 21
2
votes
0
answers
587
views
Windows Server 2008 R2 Terminal Server - Providing Single Sign On to Windows 7 Clients
I've inherited a system that may have never been fully integrated as it could have been.
We have a simple setup - A Windows 2008 R2 Server being used for Remote Desktop and Remote App access by users ...
- 328
2
votes
1
answer
3k
views
$_SERVER['REMOTE_USER'] not found using LDAP SSO
Am trying to use the SSO LDAP module on Drupal. The LDAP authentication for Drupal works fine (people can login using their AD credentials on Drupal and be logged in, the test system also returns ...
- 41
2
votes
0
answers
5k
views
Single Sign On 802.1x Wireless - saying “Connecting to <SSID>”, hangs for 10 seconds, fails with “Unable to connect to <SSID>, Logging on…”.
We are implementing WiFi on Windows 7 machines in our corporate environment. Machines should be able to log into the domain by WiFi as the Machine (Pre-Logon), and as the User (Post-Logon). We have ...
- 157
2
votes
0
answers
1k
views
Reverse proxy with single sign-on and backend authentication modules
Has anyone got any recommendations for reverse proxy software that provides a single sign-on interface to multiple backend websites via various authentication mechanisms?
e.g.
Login to the frontend ...
- 91
2
votes
0
answers
527
views
How does ForeFront UAG implement single sign-on?
One feature of Forefront is the ability to pre-authenticate external users before their requests are sent to a published web application. In addition, it is supposed to be able to forward the ...
- 255
1
vote
0
answers
875
views
SSO not working between a browser and a Keycloak using an user federation with kerberos integration to a windows AD
I am trying to get SSO working using a browser(Chrome or firefox) and keycloak configured with an user federation AD Domain(kerberos is configured).
First I present the overview of what I have and ...
- 11
1
vote
0
answers
280
views
Configuring cyrus to use oauth2 via keycloak with ldap backend?
We are using cyrus (and exim) as a long-running mail server. The requirement to store passwords in email programs seems to be a security risk to me. I would like to move auth behind something like ...
- 121
1
vote
0
answers
288
views
AD FS 3.0 SSO issue in Outlook Desktop Application with Modern Auth for MS365
I have installed and configured AD FS services on a Microsoft Windows Server 2016 Standard.
Through Azure AD Connect we were able to configure our domain as a federated domain on our Microsoft 365 ...
- 1,549
1
vote
0
answers
598
views
Microsoft-Account authentication issues after Office365 organization join
Years ago I registered my domain for Windows Live Domains (domains.live.com) and created 5 accounts for me and my family (@mydomain.tld). These email-adresses are our primary addresses and also ...
- 21
1
vote
0
answers
2k
views
Apache reverse proxy with Kerberos authenticate and LDAP authorization
Server version: Apache/2.4.37 (Red Hat Enterprise Linux)
Apache is launched as a container in the Openshift cluster.
I am using Apache as a forward and reverse proxy for Kibana.
Mandatory requirement ...
- 11
1
vote
0
answers
1k
views
AWS SSO: Should I use Permission Sets or IAM Roles, or Both?
We have AWS accounts for dev, staging, and prod. We use AWS SSO via Okta, and define groups like "Developers" and "Support" in Okta.
Developer group should have broad access to ...
- 575
1
vote
0
answers
742
views
Office 365 with SSO, but needs email to be accessed via POP and send mails via SMTP
We are moving from Godaddy to Office 365. Many of our staff use Thunderbird and a few use Gmail to read office emails (collection emails via POP).
Office 365 uses SSO by OneLogin to authenticate users....
- 11
1
vote
0
answers
965
views
Linking authentication FreeIPA and SSO
Long story short, my goal is to have all user permissions managed in one place and then deployed everywhere. My thoughts are that Active Directory/FreeIPA is perfect for this sort of thing. It also ...
1
vote
0
answers
166
views
How to configure the apache authorization chain for Kerberos (mod_auth_kerb) and SSL?
What directives and conditions to configure the Apache configuration as follows:
We try to authorize through Kerberos.
If successful (What condition to use?), Then we redirect to URL1.
Otherwise, we ...
1
vote
0
answers
693
views
Why isn't Kerberos used for SSO to cloud apps?
When comparing Kerberos to SAML, a common argument on StackOverflow sites and the rest of Internet is that SAML is for Internet / cloud applications while Kerberos is for enterprise LAN. There are ...
- 197
1
vote
0
answers
73
views
Integrating GitHub Org with SAML shibboleth & post actions
I am at the beginner level of GitHub cloud administration and looking for answers to the below-listed questions after I enable SAML integration (Shibboleth) for my Github cloud Organisation.
Before ...
github
1
vote
0
answers
377
views
IIS: Kerberos authentication only works from local machine
I'm setting up an IIS application on a server within my domain. I configured SPN's and settings to allow windows authentication to work with kerberos and Single Sign On, and everything works fine on ...
- 11
1
vote
0
answers
40
views
Created a new account in my Google Admin tenant, login always redirects to Microsoft's SSO page
I have a very old Google Admin tenant from when this service was still available for free. I don't use it for email anymore; my email is hosted on outlook.com now (another now-defunct free option). I ...
- 213
1
vote
0
answers
192
views
How can I pass login_hint/authuser to Google IdP when using AWS SSO
I have configured AWS SSO to use Google as an IdP. It's working fine.
However, since I have multiple google accounts I often have to go through the multiple login 'chooser'.
When accessing Google ...
- 171
1
vote
0
answers
47
views
Windows ADFS User Certificate URL
I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS.
I have setup User certificate enrollment. Everything work fine but I have a litle issue.
I have setup ADFS ...
1
vote
0
answers
3k
views
curl not sending credentials during negotiation
We have a Jenkins server that uses Kerberos-SSO, with a fallback to Basic if SSO is not configured on the browser or using curl.
When I use curl with the --negotiate argument, however, it doesn't send ...
- 544
1
vote
1
answer
101
views
SSO as a web frontend rather than as an external linked service
On one of our teams, we've been rapidly and individually developing or deploying a large number of dedicated web services. Some we build (using Django, Flask, Node, etc.), others are open source ...
- 61
1
vote
2
answers
955
views
AzureAD IDP Initiated SAML always return nameid-format:persistent instead of nameid-format:emailAddress
I'm developing SSO using SAML and my IdP is Azure.
I'm having problem with IDP Initiated flow. In SAML Response I always get this NameID:
<NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:...
- 111
1
vote
0
answers
25
views
Kerberos with HTTP Resource Server Login
I am having an http (IIS) resource server which uses Kerberos 5 for authentication. Every time I reach the page I need to key in my username and password but if I have done kinit in my machine (...
- 111
1
vote
0
answers
91
views
Kerberos on NameBased vhosts with SSL
Im trying to figure out how to implement kerberos for SSO on sites that are using name based vhosts on apache ( linux server)
e.g.
Lets say that I have domains a.com and b.com.
Both are set as ...
1
vote
1
answer
531
views
How can I achieve SSO to Windows RDS Services using Google Identity / GSuite?
My org is almost exclusively Linux and Mac based. We have all of our internal services configured to use our GSuite logins for identity and auth.
Now we need to use a Windows application, and I'd ...
google-cloud-platform
1
vote
0
answers
35
views
How to move from a physical AD network towards a hybrid Azure network
I'm just looking for some guidance here. Maybe a, "Hey, check out this link/book/video that shows how to get started with Azure" Everything I've found on the web is either too specific or too general ...
- 11
1
vote
0
answers
4k
views
HTTPS to HTTP SAML SSO using mod_auth_mellon
I have a simple HTTPS to HTTP reverse proxy using Apache HTTPD (CentOS)
I have enabled mod_auth_mellon for SAML SSO, it works fine if I have a simple http proxy without any virtual host.
When I ...
- 111
1
vote
0
answers
358
views
Wordpress SSO without using 3rd party plugins on Azure, is it possible?
I'm setting up a Wordpress installation on Azure which is using an external ADFS provider for single sign-on. Up to now, the Wordpress installation was self-hosted and used the miniOrange wordpress ...
- 111
1
vote
0
answers
162
views
Enabling AAD federated SSO for Google compute engine app
I have a Webapp hosted on Google compute engine. I am trying to list it on Microsoft AppSource. One of the mandatory conditions for listing is enabling of Azure Active Directory federated Single Sign-...
1
vote
1
answer
3k
views
windows 2016 rdp sso displays other user login
We have a Windows 2016 server where we want to add Single Sign-On, but when I add the server to the local GPO of my computer and try to log on, I get a screen with an empty user field.
I have tried ...
1
vote
0
answers
4k
views
Keycloak dies every few days for high memory usage
I have a Keycloak in a VPS running as SSO for the rest of the architecture. But every few days, without apparently any reason, in a single spike Keycloak uses all its available memory and enters in a ...
- 273
1
vote
0
answers
320
views
SiteMinder web agent freeze with apached 2.4 (32bit) on Windows 2012 64
I am using Apached with Siteminder for single-sign on authentication. My config is as follow:
64 bit Windows 2012 (64) R1.
Apached 2.4, (32 bits) (We tried the 64 bits but it does not work with the ...
- 219
1
vote
0
answers
895
views
Can Keycloak provide SSO via Apache web service?
I'm trying to use Keycloak as an external authentication service for Alfresco (see: Can Keycloak be used as external (SSO) authentication service for Alfresco and Share?).
I've gotten no responses to ...
- 11
Related Tags
kerberos × 25
adfs × 23
active-directory × 20
saml × 19
authentication × 14
apache-2.4 × 12
azure × 12
entra-id × 10
ldap × 8
openid × 8
linux × 5
nginx × 5
iis × 5
reverse-proxy × 4
outlook × 4
g-suite × 4
apache-2.2 × 3
windows × 3
google × 3
jboss × 3
shibboleth × 3
more related tags
Hot Network Questions
- Why do protests happen in the light of their apparent futility?
- Entry to the US after recent travel to Russia by a green card holder
- How can my book purchase get the most money to an author?
- luatex tex.sprint'ing \SetCell produces different result
- How can I reserve a TGV seat on a Germany-Switzerland ticket purchased via Deutsche Bahn?
- How do I make an arrayed object fit a 3D curve?
- Does AI-based trading assume efficient market hypothesis?
- How do I figure out how many items I should expect to exceed my error threshold?
- Does the success of AI (Large Language Models) support Wittgenstein's position that "meaning is use"?
- Safely grounding 120V AC device
- Are limits of compact leaves compact?
- Flat Bundle vs Trivial bundle
- Will SpaceX ever make a Heavy version of Starship Super Heavy
- Why were there so many 'carrier killer' Kh-22 anti-ship missiles in Ukraine in the 1990s?
- Man invents immortality, loses wife, spends life of the universe looking for her
- Can I add a breaker to this panel without violating the Rule of Six?
- How does HTTP Keepalive handle multiple requests along with EOF from same origin?
- How was Rome able to conscript and equip 400k soldiers during 2nd Punic War in a pre-industrial society?
- Measuring nA leakage current
- A visualization for the quotient rule
- Is there a valid reason why Canon's webcam plugin asks to scan my external drives?
- How to represent BFS and DFS between adjacency matrix and list?
- vertical align text in tabularray with tikz node inside
- Removing polygons that look like lines in QGIS