Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Filter by
Sorted by
Tagged with
-1
votes
1answer
75 views

With Microsoft 365 SSO. Delete user in third-party App when such user gets deleted in Active Directory

I have an application connected to Microsoft Active Directory using SSO. So basically users in the third-party App authenticate with Microsoft 365 using SSO however we would like to delete a user in ...
-1
votes
0answers
8 views

SAP Netweaver Kerberos SSO not working when Users UPN changes

Having problems with SAP Netweaver SSO after changing Active Directory Users UPN for AzureAD Connect. What we did: ActiveDirectory Testusers UPN changed from 'test1234@de.xx.yy' to 'test.user@...
0
votes
0answers
31 views

Why isn't Kerberos used for SSO to cloud apps?

When comparing Kerberos to SAML, a common argument on StackOverflow sites and the rest of Internet is that SAML is for Internet / cloud applications while Kerberos is for enterprise LAN. There are ...
1
vote
0answers
17 views

Integrating GitHub Org with SAML shibboleth & post actions

I am at the beginner level of GitHub cloud administration and looking for answers to the below-listed questions after I enable SAML integration (Shibboleth) for my Github cloud Organisation. Before ...
0
votes
0answers
24 views

IIS: Kerberos authentication only works from local machine

I'm setting up an IIS application on a server within my domain. I configured SPN's and settings to allow windows authentication to work with kerberos and Single Sign On, and everything works fine on ...
0
votes
0answers
16 views

Azure MFA Server SSO to User Portal

Users within the on-prem Azure MFA Server are created manually with a pre-defined second-factor. The 2FA validated when users are accessing an application, it calls for MFA through Website SDK. MFA ...
0
votes
0answers
8 views

SSO for SharePoint with Multiple domains

We are planning to deploy on-prem SharePoint, the challenge is. These are all external users who will be our SharePoint. How we enabled SSO, these users will be coming from the different-different ...
-1
votes
1answer
32 views

how we can generate the single sign on and reply url for new application in azure active directory

I am going to register a new application in the Azure active directory for SAML login. How can I generate my reply URL and single sign on url and entity ID ?
1
vote
1answer
28 views

graviteeio - management-rest-api oauth role mappings

Gravitee manager can be configured with keycloak authentication as described here. They state in their documentation, that role mapping could be addressed on their gravitee.yml configuration: security:...
0
votes
0answers
13 views

Does SSO still works for a user present in 2 differents Realms with Keycloak?

If I have 2 realms in keycloak : REALM1 are going to be connected to LDAP1, LDAP2 and Google open id REALM2 are going to be connected to LDAP1 and ActiveDirectory1 If I have a user in LDAP1 : will I ...
1
vote
0answers
19 views

Created a new account in my Google Admin tenant, login always redirects to Microsoft's SSO page

I have a very old Google Admin tenant from when this service was still available for free. I don't use it for email anymore; my email is hosted on outlook.com now (another now-defunct free option). I ...
1
vote
0answers
27 views

How can I pass login_hint/authuser to Google IdP when using AWS SSO

I have configured AWS SSO to use Google as an IdP. It's working fine. However, since I have multiple google accounts I often have to go through the multiple login 'chooser'. When accessing Google ...
0
votes
0answers
21 views

WSO2 5.3.0 How to Change Resident IdP SAML2 URLs

We have WSO2 Identity Server 5.3.0 running behind a load balancer. When I first set it up in our staging environment, I used the local server name in all of the configs, but later changed these to ...
1
vote
0answers
23 views

Windows ADFS User Certificate URL

I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS. I have setup User certificate enrollment. Everything work fine but I have a litle issue. I have setup ADFS ...
0
votes
0answers
23 views

Dual-tenant authentication to Azure App Service

I have an App Service (LAMP stack). Users from two Azure Active directories (AADs, tenants) should be able to visit this webapp. The rest of the world should not have access. What's the best way to ...
1
vote
0answers
293 views

curl not sending credentials during negotiation

We have a Jenkins server that uses Kerberos-SSO, with a fallback to Basic if SSO is not configured on the browser or using curl. When I use curl with the --negotiate argument, however, it doesn't send ...
0
votes
0answers
125 views

Apache authentication separation causing slowdown and multiple cred requests

<Location ~ ^[\/]{0,1}(favicon|git|jclouds|login|static)(.*)$> Require all granted Satisfy any </Location> <Location /crumbIssuer> AuthType Basic AuthName "Company ...
0
votes
0answers
18 views

IIS Server Farm Dropping Server Variables From SSO

I have an application that looks for server variables such as REMOTE_USER provided by Single Sign On. I have IIS acting as a reverse proxy to my application which is in a server farm. If I create a ...
0
votes
0answers
24 views

Buffalo Terastation LDAP

We have an LDAP server which each client machine can use for user Sign on. We then have a Buffalo Terastation NAS which we would like to use the LDAP user and permissions. Has anyone done this before? ...
0
votes
1answer
684 views

IDP initiated SSO does not works on Win server 2016

I am trying to setup IdP initiated SSO on Windows Server 2016. I have configured the Relying party trust and the claim rules as well. I enabled the IdP Sign on page following - https://docs.microsoft....
0
votes
1answer
23 views

Single Sign On in Solarwinds Security events manager (SEM)

I am having an issue where I am getting a prompt from SEM web gui to provide my credentials. I provide credentials (we use both tokens and passwords).  It does not fail unless I close the prompt. LDAP ...
0
votes
0answers
179 views

Single sign on with Samba AD DC, Linux servers, GSSAPI/Kerberos and Windows clients that are not joined to the domain

Setup We have: a machine running Samba 4 on Debian Buster as AD DC. another Debian Buster machine running Samba 4 as file server, joined to the domain with net join and using winbind for ...
0
votes
2answers
64 views

How to have only one login for multiple websites on the same linux machine?

I'm having multiple websites (like mediawiki, gitea and kanboard) and I'm thinking about making the login the same on all services. But how do I do that? I looked at AD but I read that it's Windows ...
0
votes
0answers
38 views

Trying to connect Samba4 Kerberos to an Apache website to perform a Single Sign On

I'm trying to connect a web application using apache and correctly connected to the LDAP directory, to a samba4 unix server implementing active-directory like service. My kerberos instance is working ...
2
votes
2answers
528 views

How can I resolve “SAML Providers must reference at least one SAML assertion issuer” message?

I want to setup a SSO solution using Keycloak 10.0.2 as the Identity Provider. The first application I want to setup is AWS. I followed this tutorial to enable Keycloak to sign me in using SAML. I ...
1
vote
1answer
52 views

SSO as a web frontend rather than as an external linked service

On one of our teams, we've been rapidly and individually developing or deploying a large number of dedicated web services. Some we build (using Django, Flask, Node, etc.), others are open source ...
0
votes
2answers
64 views

Configuring Azure Console for _external_ authentication/SSO/IdP?

I'm looking for pointers on how to configure Azure "IAM" to trust an external IdP/Authentication server.... am trying to find my way around the docs for Azure which is... not easy. Help would be more ...
0
votes
0answers
48 views

AzureAD OpenID Connect JWT “platf” claim value

I am setting up an application that will use AzureAD as an OpenID Connect IDP for authentication. I want to know if the authenticating device is an AzureAD "managed" or "compliant" device at the ...
0
votes
1answer
51 views

how to handle mixed domain (onprem and oncloud users)

i need to setup adfs to activate sso for an application. We need to use adfs because we have more tenands and subdomains. But my problem is, that we have some users existing only in cloud but not ...
0
votes
1answer
84 views

AzureAD IDP Initiated SAML always return nameid-format:persistent instead of nameid-format:emailAddress

I'm developing SSO using SAML and my IdP is Azure. I'm having problem with IDP Initiated flow. In SAML Response I always get this NameID: <NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:...
-1
votes
1answer
29 views

How to enable Office 365 to work as Identity Provider

I'm trying to set up my application to use Office 365 as Identity Provider for Single Sign On but I can't find specific instructions to do so.
0
votes
1answer
263 views

How to raise the 100 users cap for GCP OAuth?

I've been trying to setup a "Sign in with Google" button on my WordPress website. In my GCP console I've setup the OAuth consent screen with all the data necessary, I've submitted the app for ...
0
votes
1answer
26 views

Azure AD SSO to Facebook if user is already logged in

Hi I'm in the IT dept. for a small charity. We use Facebook as a way to promote events to the local community. Our (few) volunteers have accounts in our 365, and use this to log in to everything. ...
2
votes
3answers
6k views

Keycloak blank page behind nginx reverse proxy

After unpacking and starting keycloak to listen on 127.0.0.1, I configured nginx to work as a reverse proxy accessible from a publicly available domain via https. This is the nginx configuration: ...
1
vote
1answer
3k views

Keycloak x.509 certificate authentication

I'm trying to set up the following architecture but I'm struggling: Keycloak container with this image jboss/keycloak:7.0.0 Apache with mod_auth_openidc The apache has a protected directory Apache ...
0
votes
1answer
77 views

Is there an SSO mechanism supported as widely as LDAP?

LDAP is pretty amazing. It lets you set up a bunch of web services that all share a common user database (or rather, directory), so you can have a WordPress installation, a NextCloud, a MediaWiki etc, ...
1
vote
0answers
62 views

Kerberos on NameBased vhosts with SSL

Im trying to figure out how to implement kerberos for SSO on sites that are using name based vhosts on apache ( linux server) e.g. Lets say that I have domains a.com and b.com. Both are set as ...
0
votes
2answers
44 views

Security when working on a users laptop with their credentials

We are implementing many services with kerberos and single sign on. A security concern has been raised relating to how we fix issues with our users laptops. Typically the user will leave a device ...
1
vote
0answers
16 views

Kerberos with HTTP Resource Server Login

I am having an http (IIS) resource server which uses Kerberos 5 for authentication. Every time I reach the page I need to key in my username and password but if I have done kinit in my machine (...
1
vote
2answers
1k views

Is there a way to setup oAuth with Openvpn or wireguard?

I'm looking to build a set of services that require a single sign on. Basically, you login to my oAuth provider, and you have access to an openvpn connection(or wireguard) and a website, without ...
0
votes
1answer
16 views

Is Azure AD suitable for a public network of apps?

We are currently using Office 365 with Azure AD to manage our user management (currently about 100 users and 20 groups) in the AD. Our semi-public apps are currently using either a 3rd party user ...
1
vote
1answer
150 views

Keycloak SSO minimum mysql database privileges

I have been trying to install Keycloak but instead of the usual 'GRANT ALL PRIVILEGES' command to grant access to the database to the MySQL database, I need the exact minimum privileges to be granted. ...
0
votes
1answer
333 views

Kerberos: Wrong principal / realm for ssh-server login on a server in a subdomain

I currently try so setup the kerberos auth on a server living in a sub domain "sub.example.com". The KDC manages EXAMPLE.COM together with a dns server which manages 'example.com'. Due to ...
0
votes
1answer
302 views

InitializeSecurityContext failed with SEC_E_DOWNGRADE_DETECTED

I have a question. There's a client and server apps written in Java. Java client connects to server using kerberos authentication, the client need to retrieve a token from the server - it uses Waffle ...
0
votes
0answers
75 views

SSO for ADFS works on some desktops, but does not on some others

We have a weird issue with SSO through ADFS 3 on Windows Server 2016. While some Windows 10 clients can successfully login in IE, some cannot. All Windows 10 clients are at the same patch level. The ...
1
vote
1answer
114 views

How can I achieve SSO to Windows RDS Services using Google Identity / GSuite?

My org is almost exclusively Linux and Mac based. We have all of our internal services configured to use our GSuite logins for identity and auth. Now we need to use a Windows application, and I'd ...
0
votes
1answer
1k views

Keycloak - Null Pointer Exception when trying to map client role to a user

Hopefully someone proficient with Keycloak can help me on this issue. How to replicate: Search for a user, then go to Role Mappings > Client Roles > select the client (let's call it Portal-app for ...
2
votes
0answers
1k views

How to download SAML XML metadata from Microsoft Azure

I have an enterprise application that implements SAML SSO, and I have a new client who wishes to use it. This feature works with other clients. However, the application requires that the client ...
8
votes
3answers
1k views

Can ADFS connect to other SSO services?

I have a .net application that's wired up to my local ADFS server (connected to our corporate AD server) and everything is working fine. My question is, can my ADFS establish a trusted connection to ...
2
votes
1answer
1k views

Kerberos Ticket Hand-off No Good on Chrome on macOS X

I am implementing Okta as a single-sign on provider in an enterprise environment of about 90 users. One of Okta's features is Desktop Single Sign On - the ability for users to be authenticated with ...

1
2 3 4 5
7