Questions tagged [saml]

SAML (Security Assertion Markup Language) is an open standard and XML-based markup language for exchanging authentication and authorization information between parties, known as service providers and identity providers.

Filter by
Sorted by
Tagged with
0 votes
1 answer
44 views

Issues configuring SAML authentication in Apache Guacamole behind a HAProxy

I've deployed an Apache Guacamole server and trying to configure SSO using SAML with a Cloud IdaaS. HAproxy is in front of the Guacamole server, providing SSL offloading. Apache Guacamole was ...
user avatar
  • 83
0 votes
0 answers
21 views

How to increase the number of groups send by ADFS via SAML to Jenkins?

Yesterday we managed to integrate the CI Server Jenkins with Microsoft ADFS via SAML 2.0. When configuring the roles in Jenkins to the recieved groups of the user we noticed that only 80 groups are ...
user avatar
0 votes
1 answer
27 views

Only federate some users in AzureAD and not a whole domain

We want to test a new IDP in our organization ( this IDP is an inhouse SAML-compatible idp ). We are using AzureAD. If we federate a new domain, we can test the authentication, and it works ( xxx@...
user avatar
  • 99
0 votes
0 answers
81 views

Authentication to SonarQube with Azure AD

I have a taks to implement authentication to SonarQube with SAML from Azure AD We are using SonarQube 8.9.6 LTS with openjdk 11.0.14 OpenJDK Runtime Environment build 11.0.14+9 on Ubuntu 20.04. I've ...
user avatar
  • 1
0 votes
0 answers
33 views

Gitlab: Possible to specify roles in Azure AD manifest?

I already use Azure AD for login to Gitlab and now I want to manage roles (Regular user, Admin user) in Azure AD as well and pass them to Gitlab. Roles can be stored in the Azure Manifest, which are ...
user avatar
  • 101
0 votes
0 answers
100 views

Login to SSL VPN via SSO and then use SSO inside VPN for other Service Providers possible?

I have a setup where you authorize via SAML SSO (keycloak as idp) to access a SSL VPN (fortigate as sp). Now inside the VPN there are authorization reverse proxy servers. Is it possible to have the ...
user avatar
  • 1
0 votes
2 answers
120 views

ADFS as proxy to some IDP

As far as I know, Exchange does support WS-Federation, but it does not support SAML. At the same time I have IDP that does support SAML, but does not support WS-Federation. Is it possible to configure ...
user avatar
  • 135
0 votes
1 answer
656 views

SAML 2.0 NameIDPolicy that was not satisfied by the issued token

I am working on a SAML integration with some monitoring software, but I keep receiving the MSIS7070 error below. I have tried numerous transform combinations with no luck. I am certain this is ...
user avatar
1 vote
0 answers
78 views

Wildfly Elytron container managed authentication with federated SAML2 IDP

I'm trying to set up container-managed authentication with Wildfly 24 and would like to use an existing (federated) Shibboleth IDP. I haven't found docs detailing that use case, so I opted for the ...
user avatar
  • 9,165
0 votes
1 answer
48 views

Migrating from Azure AD SSO authentication to ADFS

We are having a customer with the following setup. onPrem Active Directory with Azure AD Connect and Password Hash Sync (PHS) including SSO activation SSO for all M365 apps Integration of about 15 ...
user avatar
-1 votes
1 answer
74 views

IBM iWelcome as federated IdP for Azure AD: any experience?

Is there any experience in configuring IBM iWelcome as federated IdP for Azure AD? The scenario is: A user register on iWelcome by specifying her/his original email as user identifier (NOTE: this ...
user avatar
0 votes
1 answer
66 views

How do I convert a multi-value SAML attribute to a single-value string in ADFS?

I previously asked a similar question about doing this in Azure AD. However, I've come to the conclusion that it is probably too limited to do this and I received no answers. However, in ADFS there is ...
user avatar
  • 3,190
0 votes
0 answers
132 views

How to transform Azure AD SAML Groups claim in to a single value

The enterprise application consuming my Azure AD IDP SAML assertions does not support multi-valued attributes. So, it does not support the groups claim. I need to send the user's group memberships as ...
user avatar
  • 3,190
0 votes
1 answer
224 views

Auth Mellon is not redirecting to IDP. Apache is returning 404 for /mellon

I am trying to enable auth mellon for on-prem weblogic app. I have apache httpd and auth mellon installed on RHEL 6.8. I followed instructions as per https://github.com/Uninett/mod_auth_mellon/wiki/...
user avatar
4 votes
1 answer
6k views

AADSTS50107: Requested federation realm object does not exist, when integrating Okta as an IdP for AAD

I'm trying to set up AAD with Okta, and find that when users visit the App Embed link and it posts their SAML response to https://login.microsoftonline.com/login.srf, they get an unhelpful error: ...
user avatar
  • 24.9k
2 votes
0 answers
349 views

Subversion Server with Azure AD SSO

There is a running CollabNet Subversion Edge Server in the current version 5.2.4. It is currently connected with LDAP for authentication. Now there is a challenge to grant permission to b2b guests of ...
user avatar
  • 45
1 vote
0 answers
22 views

Why don't identity providers have separate IDs and Names in Openstack?

I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other ...
user avatar
  • 11
0 votes
0 answers
302 views

Why isn't Kerberos used for SSO to cloud apps?

When comparing Kerberos to SAML, a common argument on StackOverflow sites and the rest of Internet is that SAML is for Internet / cloud applications while Kerberos is for enterprise LAN. There are ...
user avatar
  • 167
1 vote
0 answers
30 views

Integrating GitHub Org with SAML shibboleth & post actions

I am at the beginner level of GitHub cloud administration and looking for answers to the below-listed questions after I enable SAML integration (Shibboleth) for my Github cloud Organisation. Before ...
user avatar
  • 11
-1 votes
1 answer
33 views

how we can generate the single sign on and reply url for new application in azure active directory

I am going to register a new application in the Azure active directory for SAML login. How can I generate my reply URL and single sign on url and entity ID ?
user avatar
1 vote
1 answer
186 views

Where does Chrome fetch my identity from after having deleted cookies?

I'm trying to figure out where does Google CHrome fetch my identity from when authenticating to an Identity Provider (SAML with certificate authentication) What I have tried : Delete all cookies, ...
user avatar
  • 282
1 vote
0 answers
26 views

Windows ADFS User Certificate URL

I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS. I have setup User certificate enrollment. Everything work fine but I have a litle issue. I have setup ADFS ...
user avatar
0 votes
0 answers
1k views

How to configure Azure SAML authentication for Rapid7 InsightVM / nexpose

I'm trying to use Azure AD SAML for authenticating to Rapid7 InsightVM (Nexpose) I have the Enterprise Application registered in AAD, with the EntityID provided from the InsightVM configuration. The ...
user avatar
0 votes
1 answer
32 views

SAML sync users

Currently we are using SAML SSO, the client starts the Azure Enterprise App, provides us with tenantId, appId, certificate, and its users can log in to us through their Microsoft account. Can we use ...
user avatar
1 vote
1 answer
3k views

ADFS - How to send sAMAccountName without domain

I'm using ADFS and I need to send the sAMAccountName. Currently using a "Transform an incoming claim" rule: Incoming claim type: Windows account name Outgoing claim type: Name ID Outgoing ...
user avatar
0 votes
1 answer
802 views

IDP initiated SSO does not works on Win server 2016

I am trying to setup IdP initiated SSO on Windows Server 2016. I have configured the Relying party trust and the claim rules as well. I enabled the IdP Sign on page following - https://docs.microsoft....
user avatar
0 votes
0 answers
1k views

SAML with mod_auth_mellon results in error: Error processing authn response. Lasso error: [-432]

I have a issue with implementing SSO against ADFS with an Apache HTTPD Webserver using mod_auth_mellon. The error I get after authentication has been actually succeeded is: Apache HTTPD returns a HTTP ...
user avatar
2 votes
2 answers
1k views

How can I resolve "SAML Providers must reference at least one SAML assertion issuer" message?

I want to setup a SSO solution using Keycloak 10.0.2 as the Identity Provider. The first application I want to setup is AWS. I followed this tutorial to enable Keycloak to sign me in using SAML. I ...
user avatar
0 votes
1 answer
176 views

AzureAD IDP Initiated SAML always return nameid-format:persistent instead of nameid-format:emailAddress

I'm developing SSO using SAML and my IdP is Azure. I'm having problem with IDP Initiated flow. In SAML Response I always get this NameID: <NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:...
user avatar
  • 101
0 votes
1 answer
902 views

Configure AWS SSO with Auth0 as IDP

I am trying to configure “AWS SSO”'s to work with Auth0 as an External Identity Provider. I have made is to the point where I am getting the auth0 login as success but AWS throws me an error. error I ...
user avatar
1 vote
1 answer
6k views

AD FS Not Authenticating SAML Requests

This morning, it was brought to our attention that Active Directory Federation Services has stopped performing SAML authentications for all SAML-based relying party trusts (about 8 of them). Office ...
user avatar
  • 656
0 votes
1 answer
221 views

Redirect Google Authentication to Microsoft Authentication to use with SAML

At this point I have an issue where I want to login to Google Identity's assets but using Azure AD as the IdP (Identity Provider). I already have the whole SAML environment setup with google as the ...
user avatar
0 votes
1 answer
15 views

Is there a claim type in ADFS that states if the authentication was performed on the private or public interfaces?

Although I don't recall the correct terminology, my understanding is that a particular relay application may be provisioned separately for intranet only, or both intranet and internet. I would be ...
user avatar
4 votes
1 answer
742 views

Sure of Valid Parameter set, Powershell Says: "Parameter set cannot be resolved..."

I'm attempting to run a Powershell cmdlet that only accepts one of three specific parameters. I'm positive that I know what those parameters are, and that I am entering those parameters correctly. I ...
user avatar
0 votes
1 answer
88 views

Is there an SSO mechanism supported as widely as LDAP?

LDAP is pretty amazing. It lets you set up a bunch of web services that all share a common user database (or rather, directory), so you can have a WordPress installation, a NextCloud, a MediaWiki etc, ...
user avatar
2 votes
0 answers
2k views

How to download SAML XML metadata from Microsoft Azure

I have an enterprise application that implements SAML SSO, and I have a new client who wishes to use it. This feature works with other clients. However, the application requires that the client ...
user avatar
0 votes
2 answers
544 views

Google App Engine and SAML (Okta)

We're trying to setup a web app (django) in Google App Engine connected via SAML to our idP, Okta. It has to be done as a Custom Flexible App because of a binary requirement, making it basically a ...
user avatar
2 votes
0 answers
136 views

AADSTS700517 using AWS Cognito and Azure AD Enterprise App

I have configured an AWS Cognito UserPool to use an Azure AD Enterprise Application as a SAML federated identity provider as per the blog post here: https://medium.com/the-apps-team/how-to-add-azure-...
user avatar
1 vote
1 answer
563 views

Set an attribute as MellonUser on mod_mellon

I'm failing to setup MelonUser on my Apache configuration. The NAME_ID my IdP provides in really a session ID that changes every time, and it's the only data available in the Subject of the response. ...
user avatar
  • 175
2 votes
1 answer
120 views

ADFS Alternative questions

We had (Before it went belly up) an ADFS server that was simply doing a translation from SAML 2.0 to WSFED (My end point software can not take in SAML only WSFED). My question is, what are the ...
user avatar
  • 73
0 votes
0 answers
197 views

Is G Suite as a SAML IdP a replacement for Okta?

G Suite supports acting as the identity provider to SAML-compatible service providers, in the same way as Okta does. However, you pay a premium for Okta whereas Google SAML is included in the G Suite ...
user avatar
0 votes
1 answer
1k views

adfs giving error on authnrequest message

I have a SAML2 service provider and am trying to set up SSO with an ADFS identity provider. Currently my service provider is only working with Okta and OneLogin. When they initiate the ...
user avatar
  • 131
1 vote
1 answer
314 views

Should the AD FS Federation metadata for a Relying Party Trust be publicly accessible?

If I am a relying party, I can expose federation metadata to ease configuration for AD FS so I can import it into the Create a Relying Party Trust wizard. I can also choose to enable automatic updates ...
user avatar
  • 111
0 votes
2 answers
6k views

The SAML authentication request had a NameID Policy that could not be satisfied.

I'm using Issuance Policy as: Rule 1: Rule 2 (custom): c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"] => issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/...
user avatar
  • 185
0 votes
1 answer
432 views

Combination SAML and SSL Offloader causes error

Last night we tried to migrate a website to our new hosting provider. This new hosting provider uses a SSL offloader and this causes a problem with a website using SAML. After the migration when we ...
user avatar
  • 1
2 votes
1 answer
1k views

ADFS: Convert SAML Assertion to OAuth Token?

We have Microsoft Active Directory Federation Services (ADFS) as our authentication/federation provider. We use it for performing identity federation via SAML to several external vendors, SaaS ...
user avatar
0 votes
1 answer
1k views

Getting error "Oops, this link isn’t working…" in the browser when testing a SAML SSO configured in Azure AD as non-gallery application

I have configured a non-gallery application in order to set up SAML for one of our clients. To the best of our knowledge, all the settings are properly set - I'm just this is just a basic mistake or ...
user avatar
1 vote
2 answers
1k views

Signature verification for InCommon SAML metadata using xmlsec1 fails

InCommon Federation provides IdP and SP metadata. Their refresh policy recommends frequent checking of the metadata aggregate to use the most recent version. They strongly recommend InCommon SPs ...
user avatar
  • 11
3 votes
0 answers
4k views

How should the relying trust be set up in ADFS for SAML-based SSO?

We've done SAML-based SP-initiated SSO with a number of customers, and it's all been ok (eventually). We've got a customer now who's using ADFS. We can get idP-initiated to work fine, but with SP-...
user avatar
  • 131
0 votes
1 answer
651 views

Getting junk while accessing federationMetadata.xml on Windows server 2012 R2

I have setup ADFS on windows server 2012R2 using self signed certificate. ADFS has been installed successfully. But when I try to access the federationMetadata.xml using https:///FederationMetadata/...
user avatar
  • 11