Questions tagged [openid]
OpenID is an open standard that allows users to be authenticated by co-operating sites
37
questions
0
votes
0answers
6 views
git smart http + apache mod_auth_openidc
I have a working git/gitweb apache server using "smart http" and basic authentication. I've switched the authentication to Azure AD via mod_auth_openidc - this works fine for gitweb, but git breaks on ...
0
votes
0answers
8 views
Mapping Keycloak admin role to user-groups
in the master realm of Keycloak there's a admin role. This is the only global role in Keycloak. We have several realm using user federations to our LDAP. We would like to add this global admin role to ...
0
votes
1answer
48 views
Protecting Apache uri with keycloak auth
I'm trying to configure Apache and Keyloak to grant access to users according to their roles.
I'm trying to start with a simple configuration. so I created directory called demo1 in /var/www/ and ...
1
vote
0answers
60 views
Getting a list of OpenID Connect subjects for a G-Suite domain
I'm setting up an application that supports OpenID Connect authentication, using my G-Suite domain to support single sign-on. To set up per-user permissions, I need to map the OIDC subject to the app'...
0
votes
0answers
158 views
Ping Federate 8.2.2 .well-known/openid-configuration “jwks_uri” is missing keyset
I am creating a resource server that is using using ping federate 8.2.2 as as an authorization server to validate JSON Web Token's upon certain requests. I am trying to validate the signature, so I ...
0
votes
1answer
104 views
GitLab OpenID Connect Provider - User info missing email claim
I have asked this question on the GitLab forum as well: https://forum.gitlab.com/t/openid-connect-user-info-missing-email-claim/21902
I’m not familiar with OAuth or OpenID Connect.
I’m having ...
3
votes
1answer
3k views
How To Use Amazon Cognito As An SSO OpenID Identity Provider
We currently use Google as an OpenID identity provider to our web platform. We need to move away from it. I discovered Amazon Cognito (we already use EC2/S3 and the rest).
I discovered the ...
2
votes
0answers
978 views
SAML/OpenID authentication on Docker/Core OS
I have a set of servers running Core OS/Docker/Docker Swarm.
I have my users in a SAML/OpenID SSO server. I want these users to be able to
run Docker containers on my Core OS cluster.
How do I ...
2
votes
0answers
337 views
Do I need my own oauth and/or openid connect provider [closed]
Sorry .... I want to completely rephrase this question:, and I've asked the same question on Information Security now
The system I'm working on will have a mobile application, a web portal and an ...
0
votes
1answer
330 views
Server denied check_authentication after migration of Drupal
I just moved a drupal website from one server to another.
On the original server the site was set up directly in apache.
On the new server, i have a docker layer in between:
The machine runs a debian ...
0
votes
1answer
59 views
Lotus Domino as Amazon IAM Identity Provider
I am looking for the way to configure our corporate Lotus Domino server as an Idenity Provider of Amazon IAM service. Amazon supports SAML and OpenID Provider Types. Can I configure Domino server that ...
0
votes
1answer
368 views
SimpleSAMLphp OpenID Consumer
I'm using SimpleSAMLphp as an OpenID Consumer and no openID provider I tried seems to work.
I always get the following error:
Exception during login: SimpleSAML_Error_BadRequest: BADREQUEST('%REASON%'...
0
votes
1answer
41 views
Have simpleid also provide the identifier
I have a running simpleid installation, and I use my own homepage as the identifier. Now I want to add a user to simpleid who does not have a homepage or similar.
Does simpleid provide an identifier ...
0
votes
1answer
313 views
Single sign-on with Chef
I'm getting my personal infrastructure set up (Gitlab, Jenkins, etc.) and I'm planning on using OpenID for single sign-on. I understand that SSO works for Gitlab and Jenkins.
Would I be able to ...
0
votes
1answer
66 views
how can you use openID to authenticate different kind of users?
How can you have users authenticate on a web site with different permissions.
I would like to have administrator, superuser, collaborators and normal users.
In particular, I would like to restrict ...
2
votes
3answers
1k views
How to configure simpleid to claim my ID?
I am trying to configure Apache as an OpenID provider using simpleid.
I have followed the instructions to the letter till I got to the part about "Claim your identifier".
Now, this is where I am ...
1
vote
1answer
740 views
Using Apache HTTP user in Tomcat?
I need users to authenticate in Apache HTTP for some static resources (using mod_auth_openid. I also have a Tomcat application running. How can I accept the HTTP user as the Tomcat user, so the users ...
1
vote
1answer
768 views
How can I set up an authentication system with single instance storage of credentials and several authentication methods/interfaces?
Background: I have a collection of Linux-based servers (let's say a few dozen) that are hosted in different locations. Some servers are lone satellites while others are hosted together in the same ...
-1
votes
1answer
666 views
Any Windows based OpenID servers out there? [closed]
I've been looking to setup an OpenID server for a special project, but haven't found any workable OpenID server software packages. Originally was looking for a *nix solution, and found several, but ...
2
votes
1answer
2k views
Single Sign-on for Intranet WordPress using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory?
Is it possible to have single sign-on for intranet WordPress sites by using OpenID (or OAuth), IIS, Integrated Windows Authentication, Active Directory?
I'd like to have Active Directory users ...
2
votes
1answer
88 views
PhpMyID and mobile browsers
I have PhpMyID running on my server. When I use my own provider to log in with any desktop browser, it works just fine.
But when I try to log in with my handheld device which is running Android 2.2, ...
1
vote
1answer
2k views
Set up Jenkins to use Crowd's OpenID for SSO?
Been trying to get Jenkins to work with Crowd's OpenID server so we can use single sign-on like with our Atlassian stuff (the Jenkins Crowd plugin can't do SSO). Can't seem to find the proper OpenID ...
-1
votes
2answers
129 views
OpenID client is failing due to content negotiation on Apache representing OpenID server [closed]
I am trying to login to Superuser with OpenID, and it generates a request like this:
telnet phor.net 80
GET /professional HTTP/1.0
Accept:text/html,application/xhtml+xml,application/xrds+xml`
And ...
1
vote
1answer
674 views
openID delegation - no endpoint found
I posted this query on staackoverflow main but it was suggested I should ask here. Sorry for the non-openID login, but as you can see, I'm having some issues.
In short:
A couple weeks ago I noticed ...
2
votes
2answers
1k views
OpenID server with PHP
We have an existing user database (in our SMF forum) and we want to setup an OpenID server so that our users can use their account to login also on other sites.
The user database can be accessed via ...
2
votes
2answers
307 views
Is there an OpenID demo server out there? [closed]
I'm doing some experiements with adding OpenID to something I'm working on, and I'd like to test out a few providers.
Is there a server out there that will go through the OpenID login process (same ...
18
votes
6answers
2k views
Is OpenID this easy to hack or am I missing something?
For those Relying Parties (RP) that allow the user to specify the OpenID Provider (OP), it seems to me than anyone that knows or guesses your OpenID could
Enter their own OP address.
Have it validate ...
9
votes
5answers
678 views
0
votes
1answer
161 views
Apache fails when I pass an URL as an argument
Hey everybody, Im really confused about this problem. Ill try to describe it:
The problem is:
http://mydomain.com/somedir/somephp.php?arg1=value&arg2=http://otherdomain.com&arg3=http://...
1
vote
2answers
719 views
DNS trouble - think it might be caused by two NS records
About a week ago, I updated my DNS, adding:
HOST, TYPE, VALUE, TTL
*.soup-team.com CNAME www.myopenid.com 3600
mail.soup-team.com CNAME ghs.google.com 3600
HOST, TYPE, VALUE, MX, TTL
soup-team.com ...
1
vote
1answer
123 views
Can you recommend a robust OpenAPI 2.0 provider?
Help me find a robust OpenID 2.0 provider!
We're looking at various SSO solutions for our organization, and I would like to suggest OpenID as a viable option, since (a) there is good consumer support ...
7
votes
3answers
14k views
How do accept multiple authentication options in Apache?
I want to protect a path in my VirtualHost but allow users a variety of authentication options (e.g. mod-auth-cas, mod-auth-openid and mod-auth-digest.) How do I set up the virtual host definition to ...
1
vote
2answers
864 views
OpenID provider using Apache SSL/FakeBasicAuth?
I'd like to set up an OpenID provider for our group, which we can use to log in to internal and external OpenID-aware services (e.g. stackoverflow.com).
Our users all have X.509 certificates issued ...
23
votes
25answers
2k views
Is Open ID better than the usual LogIn system? [closed]
We are developing a web system and considering using the Open Id feature. Do you think it is any better than the usual way of loggin users in? If we use the Open Id feature that means the users will ...
5
votes
5answers
333 views
Alleviating the Password Explosion Problem
Don't you just hate it when your password explodes, letting the magic smoke out of your server, and setting lp0 ablaze?
In all seriousness, the number of places a person needs a username and password ...
0
votes
2answers
208 views
Distributed User Authentication
I have an heterogeneous system in my office with different OS and they change rapidly.
I was looking for a solution to get authentication in a distributed way like OpenID so I can login machine_A ...
27
votes
8answers
1k views
Is there a danger in fake OpenID providers?
I've been wondering. Since anybody can start an OpenID provider, and since there is no central authority that approves OpenID providers, why won't fake OpenID providers become a problem?
For example, ...
