Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

0
votes
0answers
15 views

Is G Suite as a SAML IdP a replacement for Okta?

G Suite supports acting as the identity provider to SAML-compatible service providers, in the same way as Okta does. However, you pay a premium for Okta whereas Google SAML is included in the G Suite ...
0
votes
0answers
9 views

Kerberos Authentication in apache php for subdomains

I have been trying to setup SSO for a website along with it's sub-domains and i want to login to one of the sites using domain credentials and then switch to another site without any credentials input....
0
votes
0answers
21 views

CAC/Smart Card Authentication with ADFS 2012 R2 server

I've Smart Card/CAC authentication setup to work with ADFS for SSO purposes, it works when I have the UPN attribute defined in user's profile in Active Directory that matches the UPN value from the ...
-2
votes
0answers
13 views

ADFS integration with Google Suite [closed]

Does anyone have any experience/guide to integrate Gapps with ADFS 4.0 ( Server 2016) for harnessing SSO capabilities with ADFS. ?
0
votes
0answers
35 views

IIS url write to tomcat with windows authentication SSO

are there any ways to pass authentication info from the user's account in windows to Tomcat via IIS Url rewrite? Tomcat will be doing the authentication against the AD with the auth info that came ...
0
votes
0answers
20 views

Shibboleth IdP - Generating eduPersonTargetedID

How to properly generate eduPersonTargetedID based on an existing attribute from LDAP? So far I have approximately the following in attribute-resolver.xml: <AttributeDefinition xsi:type="...
1
vote
1answer
57 views

Federated SSO to AWS using CLI

We have successfully setup an external idP using google and connected it to AWS. Our users now have Federated SSO with AWS and can easily log into the web console with SAML 2.0 federation Role we ...
0
votes
0answers
32 views

What does the AD FS setting CertificateThresholdMultiplier really mean?

In trying to pinpoint problems for a certain user and AD FS setup, I'd like to speed up the certificate auto-rollover process. It appears that CertificateThresholdMultiplier would be ideal for this ...
0
votes
1answer
50 views

Making an HTTP Request for an ADFS IP, Getting “There are no registered protocol handlers”

I am trying to use the passive requester protocol defined in http://docs.oasis-open.org/wsfed/federation/v1.2/ws-federation.html To do this, I am making the GET Request: curl -X GET -k -i 'https://...
1
vote
0answers
22 views

How to move from a physical AD network towards a hybrid Azure network

I'm just looking for some guidance here. Maybe a, "Hey, check out this link/book/video that shows how to get started with Azure" Everything I've found on the web is either too specific or too general ...
0
votes
0answers
145 views

Apache Single Sign On Working on 1 of 2 Portals

I use a helpdesk system in our intranet that I've configured for Single-Sign-On via LDAP/Active Directory. The helpdesk server itself lives on an Ubuntu 16.04 Server box running on Apache, Server ...
0
votes
1answer
215 views

how authenticated multiple subdomains in nginx with one login

we've got app consisting of several parts. Each part is running on it's subdomain (nginx site). We would like to hide access of dev env behind some shared auth, where first login on whatever of ...
0
votes
0answers
234 views

Issue setting up SSO with Cognos 11 and Websphere Portal

I can't seem to get Single Sign-On working with Cognos. I am trying to setup SSO with IBM Websphere Portal 8.5 and Cognos 11.0.11 with IBM HTTP Server 8.5. I followed IBM's guide to setup Cognos SSO ...
0
votes
1answer
161 views

Setting nameid-format:persistent in SimpleSAML request

I'm setting up a single-sign-on (as service provider) via SimpleSAML. After importing the Metadata from the identity provider's XML, the first redirect worked. However, the login fails with a ...
0
votes
1answer
295 views

Duplicate SPN's - ADFS

Trying to setup ADFS with AD Connect. I get an error message when trying to add the ADFS service account. The error states that there is already an existing service account in the directory with the ...
0
votes
0answers
15 views

SAML SP Certificate Changing: do changes actually need to happen at the Identity Provider for a CA-issued cert?

Our certificate that we use for signing SAML redirect requests is expiring. We've renewed the certificate by a trusted CA, but I've been told that once we update the certificate, we need to notify ...
0
votes
0answers
348 views

Apache Kerberos SSO without login prompt

I've successfull implemented SSO with Kerberos an a apache webserver. Whenever a user opens the webpage, he is prompted to enter his credentials (username@REALM & password). Is there a possibility ...
2
votes
1answer
2k views

Password reset not working because password writeback not working in portal.azure.com

I have a problem with portal.azure.com user password reset. I have configured hybrid identity with single sign on in azure AD and onpremis AD. The connection was made via Azure AD Connect. The ...
0
votes
1answer
159 views

Remote Desktop SSO 2012 R2

The client and server are using Active Directory - when connecting using Remote Desktop, "Your Windows logon credentials will be used to connect" is shown but the login screen is still being shown. Re-...
0
votes
0answers
263 views

Office365 SSO with JumpCloud SAML

I've set up SSO for Office365 using JumpCloud as our IdP through a SAML connection via the Azure PowerShell module as outlined here: https://support.jumpcloud.com/customer/en/portal/articles/2475125-...
1
vote
0answers
1k views

HTTPS to HTTP SAML SSO using mod_auth_mellon

I have a simple HTTPS to HTTP reverse proxy using Apache HTTPD (CentOS) I have enabled mod_auth_mellon for SAML SSO, it works fine if I have a simple http proxy without any virtual host. When I ...
1
vote
1answer
339 views

nginx proxy server setting request url for subsequent request

server { server_name 127.0.0.1; listen 3000; location = /auth { internal; proxy_pass http://127.0.0.1:8088/auth; } location / { auth_request /auth; ...
1
vote
1answer
59 views

Shibboleth return url does not work over subdirectory?

We are trying to install Shibboleth for the first time and we got everything working perfectly when applying single sign for a website over a top level domain, but not under a sub directory. Here is ...
0
votes
0answers
487 views

SAML error for SSO with ADFS - MSIS0038: SAML Message has wrong signature

Hi I am trying to use SSO to authenticate my client's users directly to my website. My client's IDP is Microsoft ADFS and I am using Passport-SAML (https://github.com/bergie/passport-saml) to ...
1
vote
1answer
226 views

SPN generation for multiple service account on a Web server

I am trying to achieve Azure SSO in my organisation. I have a web server hosting multiple websites and web application under those sites. Users access them in below fashion https:// < SiteName >...
0
votes
0answers
41 views

how to set the IDP attribute value in Apache2.4 environment variable

I want to set the SAML attribute value(Role) coming from the IDP and want to check this condition in <"If> block, something like this below. however the <"If > condition is throwing error <...
0
votes
0answers
667 views

Getting 404 for URL /adfs/ls in SP initiated sign on

I have done configurations to set up SSO using ADFS (on windows server 2012 R2) and shibboleth (on Ubuntu 12.x box). Whenever I do SP initiated sign on i.e. https://mywebapp.com/authsml; the URL gets ...
0
votes
1answer
313 views

Getting junk while accessing federationMetadata.xml on Windows server 2012 R2

I have setup ADFS on windows server 2012R2 using self signed certificate. ADFS has been installed successfully. But when I try to access the federationMetadata.xml using https:///FederationMetadata/...
0
votes
0answers
229 views

Microsoft SSO fails at ADFS on Internal Network

Developer here, so please bear with me as I attempt to ask this question. When a user on an iOS device or macOS device attempts to log into a Microsoft service (office.com, ect.) that use the ...
1
vote
1answer
31 views

customise saml attributes Azure AD

I have configured SAML SSO against a new app in my Azure Console. I have proven it authenticates using simplesamlPHP. I am trying to add/adjust the attributes that are passed back with the SAML token. ...
1
vote
1answer
786 views

Where are 'DeviceContext' claims when using alternate browser in ADFS 4.0?

I know this is probably not the best place to ask this question. But, after days of working on this, and having posted in the Microsoft Forum, I'm at my wits end. We are utilizing a hybrid ADFS 4.0 (...
0
votes
0answers
103 views

Getting windows store to send Kerberos ticket to Azure AD for SSO

I have managed to get Azure AD Connect Installed, I can connect via smart links to office online etc via sso, however, upon logging into Windows 10 for the first time, Users are prompted to login to ...
1
vote
1answer
585 views

Combine apache auth providers of different types with basic auth only if proactively provided by client

I'd like to be able to have a path on an apache server (2.4.18+ on ub16) that primarily authenticates using SAML (using the mod_auth_mellon plugin) for interactive use, but also supports having the ...
0
votes
1answer
1k views

Publishing of Windows 2016 Server RemoteApp and automatic delivery of icons to the Start Menu doens't work

I'm trying to setup a lab with a VM hosting all the roles for Windows 2016 Server Remote Desktop Services (CB, SH, WA) to publish few apps to be delivered to Windows 10 Professional Clients. All ...
-1
votes
0answers
242 views

CAS and apache httpd proxy - it does not keep session after login

I'm using Apereo CAS for Enterprise SSO. I'm trying to set a simple reverse proxy with the following Apache httpd configuration: <VirtualHost *:80> ServerName mydomain ...
0
votes
1answer
107 views

How to configure AssertionConsumerServiceIndex processing in Okta?

In my Okta App I set up Single sign on URL and a couple of Requestable SSO URLs. The idea is that I send a SAML message with index, and Okta chooses one of requestable SSO urls to send a response. ...
0
votes
2answers
58 views

SSO infrastructure for Linux+Win clients

I currently have an office network revolving essentially around three services, all hosted under Linux: Shared storage area served via Samba. Mail Web/IMAP handled by Zimbra. Project management/...
0
votes
1answer
889 views

.NET Issue on ADFS SSO behind a Reverse Proxy

I have a .NET application that uses ADFS for SSO. It works when I test it on my local machine and test environment but it fails when deployed to the client environment. The client environment is like ...
1
vote
0answers
236 views

Wordpress SSO without using 3rd party plugins on Azure, is it possible?

I'm setting up a Wordpress installation on Azure which is using an external ADFS provider for single sign-on. Up to now, the Wordpress installation was self-hosted and used the miniOrange wordpress ...
0
votes
1answer
346 views

Azure AD SAML2 SSO issues wrong AuthnInstant in SAMLResponse

I'm integrating my application with MS Azure AD IDP for SAML2 IDP-initiated single sign on. I am using my company's Office 365 account and Azure AD service accessible through it. In my test ...
0
votes
0answers
290 views

ADFS 4.0 Windows 10 1703 SSO

We have recently updated most of our clients to windows 10 1703 and updated ADFS from 3.0 to 4.0 via farm migration. Any client running Windows 7 or 10 1607 still works as expected and external access ...
0
votes
0answers
94 views

Identity providers for SSO and untrusted sites

I am implementing SSO between a custom PHP app and an in house tableau server using SAML. I chose auth0 as my identity provider. I got it working with a test version of the app running in a Vagrant VM....
2
votes
0answers
141 views

Enabling AAD federated SSO for Google compute engine app

I have a Webapp hosted on Google compute engine. I am trying to list it on Microsoft AppSource. One of the mandatory conditions for listing is enabling of Azure Active Directory federated Single Sign-...
0
votes
1answer
71 views

What is the purpose of the 'keyblock' part of the Kerberos credential cache

The documentation of MIT Kerberos explains here how the credential cache file is formatted. It basically consists of: a header information about the REALM and the user a keyblock information about ...
1
vote
2answers
89 views

Questions about user authentication strategies

I am currently re-doing the IT infrastructure at my company. It's currently all over the place, so I'm trying to re-organise everything from the ground up. First thing I thought I would tackle is ...
2
votes
1answer
1k views

Problems connecting to a freeIPA client host via ssh

I am trying to set up an IPA environment with a CentOS 7.3 server and clients and I am experiencing a behavior that I am not able to understand. I am using IPA version 4.4.0. I was able to run ipa-...
2
votes
1answer
2k views

Sync AD from multiple on-premise server to Office 365

I want to migrate active directory accounts from multiple on-premise servers (located on different location and having same domain name) to Office 365. I am using Azure AD Connect to sync these ...
0
votes
0answers
143 views

Is there a way to detect server ip in nginx configuration file?

I'm using nginx/1.12.0 and tried $server_addr directive but it gives me an error: nginx: [emerg] invalid parameter "$server_addr" in /etc/nginx/sites-enabled/conf Here is my code nginx conf ...
0
votes
1answer
1k views

windows 2016 rdp sso displays other user login

We have a Windows 2016 server where we want to add Single Sign-On, but when I add the server to the local GPO of my computer and try to log on, I get a screen with an empty user field. I have tried ...
0
votes
1answer
185 views

AAD Connect and Pass Through authentication

was wondering if anyone has any practical experience with enabling SSO via AADConnect and the new pass-through authentication - https://docs.microsoft.com/en-us/azure/active-directory/connect/active-...