Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Filter by
Sorted by
Tagged with
0
votes
0answers
5 views

Can roles be enabled on users of a group in keycloak

Can we have users added under a certain group and then give few roles to each of these groups in keycloak? For ex, if we have a group called 'admin', all users under this group will have read/write ...
1
vote
1answer
44 views

SSO as a web frontend rather than as an external linked service

On one of our teams, we've been rapidly and individually developing or deploying a large number of dedicated web services. Some we build (using Django, Flask, Node, etc.), others are open source ...
0
votes
2answers
59 views

Configuring Azure Console for _external_ authentication/SSO/IdP?

I'm looking for pointers on how to configure Azure "IAM" to trust an external IdP/Authentication server.... am trying to find my way around the docs for Azure which is... not easy. Help would be more ...
0
votes
0answers
28 views

AzureAD OpenID Connect JWT “platf” claim value

I am setting up an application that will use AzureAD as an OpenID Connect IDP for authentication. I want to know if the authenticating device is an AzureAD "managed" or "compliant" device at the ...
0
votes
0answers
13 views

CAS Server get 403 error using apache and ssl

Using an Ubuntu server, I used the CASSAVA WordPress plugin. Wordpress is the CAS SERVER in PHP. Logging into Wordpress allows logins into other clients. It works fine on one of my apache servers ...
0
votes
1answer
50 views

how to handle mixed domain (onprem and oncloud users)

i need to setup adfs to activate sso for an application. We need to use adfs because we have more tenands and subdomains. But my problem is, that we have some users existing only in cloud but not ...
0
votes
0answers
14 views

How “automatically detect settings” in IE affects Sharepoint SSO

Our network infrastructure is built on software from MS. I noticed that unchecking "Automatically detect settings" in IE disables SSO from IE and Chrome for our intranet sites based on Sharepoint. The ...
0
votes
0answers
12 views

OpenID Client in MediaWiki fails to load

I'm trying to set up a MediaWiki instance secured with Keycloak. I used the descriptions for the needed plugins (PluggableAuth and OpenID Connect). But when I set this up, I get an internal server ...
0
votes
0answers
34 views

How to avoid Payara's GlashfishSingleSignOn NPE on null Context for PwcCoyoteRequest getContext().getRealm() when put behind nginx proxy_pass

I have a typical docker-compose setup where my Java AS (Payara) is behind a web server (nginx) that implements a reverse proxy via proxy_pass directive to forward all application server requests to ...
0
votes
1answer
34 views

AzureAD IDP Initiated SAML always return nameid-format:persistent instead of nameid-format:emailAddress

I'm developing SSO using SAML and my IdP is Azure. I'm having problem with IDP Initiated flow. In SAML Response I always get this NameID: <NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:...
-1
votes
1answer
23 views

How to enable Office 365 to work as Identity Provider

I'm trying to set up my application to use Office 365 as Identity Provider for Single Sign On but I can't find specific instructions to do so.
0
votes
0answers
49 views

How to create two apps in MS Azure with the same Entity IDs?

I am needing some technical inputs to overcome a technical challenge with regards to an MS Azure app. Goes like this... We have manually configured a non-gallery app in MS Azure which allows a ...
0
votes
0answers
49 views

Can the domain of AWS ALB Authentication Session Cookie be customized?

I am trying to use AWS Application Load Balancer to authenticate with an IdP over OIDC. I am setting the ALB for a site that is available at a.b.c. I wanted to understand if the ALB listener rule ...
0
votes
1answer
102 views

How to raise the 100 users cap for GCP OAuth?

I've been trying to setup a "Sign in with Google" button on my WordPress website. In my GCP console I've setup the OAuth consent screen with all the data necessary, I've submitted the app for ...
0
votes
1answer
21 views

Azure AD SSO to Facebook if user is already logged in

Hi I'm in the IT dept. for a small charity. We use Facebook as a way to promote events to the local community. Our (few) volunteers have accounts in our 365, and use this to log in to everything. ...
0
votes
2answers
1k views

Keycloak blank page behind nginx reverse proxy

After unpacking and starting keycloak to listen on 127.0.0.1, I configured nginx to work as a reverse proxy accessible from a publicly available domain via https. This is the nginx configuration: ...
0
votes
0answers
15 views

any command line support for g suite saml apps?

I have a bunch of my services using gsuite saml auth Its super easy to setup and use when logging into these services via a web browser But for some services I want to access them via command line, ...
1
vote
1answer
601 views

Keycloak x.509 certificate authentication

I'm trying to set up the following architecture but I'm struggling: Keycloak container with this image jboss/keycloak:7.0.0 Apache with mod_auth_openidc The apache has a protected directory Apache ...
0
votes
0answers
11 views

Duo 2FA and Separate Directory Services Integration

I work on a large University campus that has its own CAS server and directory services(AD DS). My specific department has its own CAS server and LDAP directory service(Oracle) which provides ...
0
votes
1answer
68 views

Is there an SSO mechanism supported as widely as LDAP?

LDAP is pretty amazing. It lets you set up a bunch of web services that all share a common user database (or rather, directory), so you can have a WordPress installation, a NextCloud, a MediaWiki etc, ...
1
vote
0answers
40 views

Kerberos on NameBased vhosts with SSL

Im trying to figure out how to implement kerberos for SSO on sites that are using name based vhosts on apache ( linux server) e.g. Lets say that I have domains a.com and b.com. Both are set as ...
0
votes
2answers
44 views

Security when working on a users laptop with their credentials

We are implementing many services with kerberos and single sign on. A security concern has been raised relating to how we fix issues with our users laptops. Typically the user will leave a device ...
0
votes
0answers
91 views

How can I create AWS QuickSight users connected to SSO accounts?

My organization uses SSO to access AWS, so our account names look something like this: GodSSO/owner@domain.com DevSSO/coder@domain.com DevSSO/writer@domain.com ReadSSO/auditor@domain.com ReadSSO/...
1
vote
0answers
15 views

Kerberos with HTTP Resource Server Login

I am having an http (IIS) resource server which uses Kerberos 5 for authentication. Every time I reach the page I need to key in my username and password but if I have done kinit in my machine (...
0
votes
0answers
28 views

Proxy Auth using Google SSO with SAML

I'm in charge of making a poc for a proxy machine who will authenticate user via Google SSO (SAMLv2). Once the user is authenticated, the proxy will let him through to access the url he was ...
1
vote
1answer
506 views

Is there a way to setup oAuth with Openvpn or wireguard?

I'm looking to build a set of services that require a single sign on. Basically, you login to my oAuth provider, and you have access to an openvpn connection(or wireguard) and a website, without ...
0
votes
0answers
50 views

SSO with HAProxy ALOHA 11 error

I have configured SSO using Template Single Sign-on (V1.2.3) When I try to connect, I have this error: "Request forbidden by administrative rules" And this one "user.err HAProxy-sso: [03] ...
0
votes
1answer
15 views

Is Azure AD suitable for a public network of apps?

We are currently using Office 365 with Azure AD to manage our user management (currently about 100 users and 20 groups) in the AD. Our semi-public apps are currently using either a 3rd party user ...
0
votes
0answers
34 views

Looking for a directory service/SSO solution that integrates well with AWS and G Suite

Today my organisation uses an Active Directory server which we sync to G Suite with GCDS. The AD server is basically just a directory with all users and some groups as we don't use any other features ...
1
vote
1answer
54 views

Keycloak SSO minimum mysql database privileges

I have been trying to install Keycloak but instead of the usual 'GRANT ALL PRIVILEGES' command to grant access to the database to the MySQL database, I need the exact minimum privileges to be granted. ...
0
votes
0answers
15 views

Using Azure AD as Auth method for AppCenter

Having trouble connecting Visual Studio App Center with AzureAD Azure is not the primary IDP we only use it for 365 for a small group of users (finance) Found that a team has been using appcenter and ...
0
votes
1answer
159 views

Kerberos: Wrong principal / realm for ssh-server login on a server in a subdomain

I currently try so setup the kerberos auth on a server living in a sub domain "sub.example.com". The KDC manages EXAMPLE.COM together with a dns server which manages 'example.com'. Due to ...
0
votes
0answers
13 views

openldap integration with sonicwall firewall

In 2008 server, in hyper-v we have installed ubuntu. In that i configured openldap to integrate users to sonicwall. From browser i can access phpldapadmin, and created child entries. In sonicwall i ...
0
votes
1answer
133 views

InitializeSecurityContext failed with SEC_E_DOWNGRADE_DETECTED

I have a question. There's a client and server apps written in Java. Java client connects to server using kerberos authentication, the client need to retrieve a token from the server - it uses Waffle ...
0
votes
0answers
48 views

SSO for ADFS works on some desktops, but does not on some others

We have a weird issue with SSO through ADFS 3 on Windows Server 2016. While some Windows 10 clients can successfully login in IE, some cannot. All Windows 10 clients are at the same patch level. The ...
1
vote
0answers
40 views

How can I achieve SSO to Windows RDS Services using Google Identity / GSuite?

My org is almost exclusively Linux and Mac based. We have all of our internal services configured to use our GSuite logins for identity and auth. Now we need to use a Windows application, and I'd ...
0
votes
0answers
35 views

Testing web app with SAML authentication locally

I've been transitioning my web app authentication from Active Directory to SAML with OneLogin using python-saml. Before making the change to SAML, I was able to run the website on localhost. After ...
0
votes
0answers
369 views

Keycloak - Null Pointer Exception when trying to map client role to a user

Hopefully someone proficient with Keycloak can help me on this issue. How to replicate: Search for a user, then go to Role Mappings > Client Roles > select the client (let's call it Portal-app for ...
0
votes
0answers
10 views

Single Sign On on Windows Machine

I just configured Single Sign On to my internal Webmail Server Zimbra, everything like Intranet Zone, and autologin in intranet zone is configured, Firefox is also configured with needed network....
1
vote
0answers
254 views

How to download SAML XML metadata from Microsoft Azure

I have an enterprise application that implements SAML SSO, and I have a new client who wishes to use it. This feature works with other clients. However, the application requires that the client ...
0
votes
0answers
185 views

SSO using two different identity provider using Keycloak

I am trying to figure out how to implement an SSO using KeyCloak where users of our system can use either their designated google domain account or their account from our legacy system to login. I ...
0
votes
0answers
16 views

No private key found

I have set up the adfs sso login and certificate. When I enter my sharepoint site, a prompt is popped with sign through adfs sign in token but when i click on it error occurs stating that there is no ...
0
votes
0answers
426 views

Configuring authentication methods per relying party trust in ADFS 5.0?

In ADFS 3.0 (Windows Server 2012 R2) you were able to configure primary authentication per relying party trust under Authentication Policies\Per Relying Party Trust in AD FS Management. How do I do ...
8
votes
3answers
1k views

Can ADFS connect to other SSO services?

I have a .net application that's wired up to my local ADFS server (connected to our corporate AD server) and everything is working fine. My question is, can my ADFS establish a trusted connection to ...
0
votes
0answers
46 views

ADFS authentication with an app between SP and IDP

I have to set up an ADFS server for SSO in an existing architecture. I've already done it for some apps but I have to plan it for another. The application that requires SSO doesn't communicate ...
2
votes
1answer
796 views

Kerberos Ticket Hand-off No Good on Chrome on macOS X

I am implementing Okta as a single-sign on provider in an enterprise environment of about 90 users. One of Okta's features is Desktop Single Sign On - the ability for users to be authenticated with ...
0
votes
2answers
2k views

Azure AD SSO for non-azure Linux VMs?

I currently have a VPS hosting for two servers with Ubuntu outside Azure network and a free azure AD plan. I see this option here: https://docs.microsoft.com/en-us/azure/virtual-machines/linux/login-...
0
votes
1answer
265 views

Kerberos authentication not working with Apache and PHP-FPM

I have configured kerberos authentication in apache with a php-fpm drupal backend. Checking the apache logs it looks fine at first glance but somehow it seems that the authenticated user gets lost ...
1
vote
1answer
404 views

Gitlab + Azure AD + LDAP

I have gitlab (ee) setup with terraform to run in a k8s cluster on azure. This all works fine and dandy, but what I would love to do is use LDAPS to sync user and group permissions with Azure AD, so I ...
2
votes
0answers
157 views

Mapping GSuite custom attribute value via Groups

So, I have followed instruction here: https://aws.amazon.com/blogs/security/how-to-set-up-federated-single-sign-on-to-aws-using-google-apps/ On how to set up AWS SSO via GSuite. My issue is, I need ...

1
2 3 4 5
7