Last call to make your voice heard! Our 2022 Developer Survey closes in less than a week. Take survey.

Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Filter by
Sorted by
Tagged with
0 votes
0 answers
5 views

Why would Google Chrome profiles not respect profile boundaries with multiple organization SSO accounts?

We're facing a strange issue and I'm not sure what could be the issue. Every web browser lets you create different profiles. The idea is that each profile is walled off from each other. You can log ...
user avatar
-1 votes
0 answers
22 views

How to setup a school/university/company-like SSO

I would like to setup a client-server system such that the end product is similar to taht used by universities, schools, and businesses. That is, I'd like to be able to sit down at any (properly setup)...
user avatar
0 votes
0 answers
36 views

Azure AD Kerberos decryption key rollover; new-azureADSSOAuthenticationContext; using token instead of pscredential

We do the 30 days kerberos decryption key rollover process automated by using an "encrypted" password stored within a text file to create the neccessary PSCredential object for the ...
user avatar
0 votes
0 answers
18 views

Is it possible to add Google single sign on to specific 365 users, NOT the whole tenant?

We've got a client with a satellite office outside of the US, and it's not connected to their AD server. As such, changes to their 365 passwords are not synced like the home office does, and it gets ...
user avatar
  • 1
0 votes
0 answers
22 views

Project/Tool Windows Credential Provider to use SAML or OIDC for RDP 2FA

I would like to use the same login with the same 2FA I use for SSO in my Webbrowser on RDP-connections. Google Credential Provider for Windows seems to do that, but I need to use my on-premise SSO-...
user avatar
0 votes
1 answer
40 views

basic understandig about kerberos sso in apache

I'm trying to configure kerberos sso in apache at the moment. On the test server the website sub.internal.local workes quite well in reference to the kerb sso. When I try to adopt the config to ...
user avatar
  • 1
0 votes
0 answers
35 views

ADFS SSO error: Invalid audience for this response

My team are about to launch a new site, which authenticates users using SSO to our internal ADFS. SSO works on our local and staging environments and now we're setting up what will be the live ...
user avatar
  • 243
0 votes
1 answer
38 views

OpenCms: Kerberos SSO authentication with httpd+Tomcat

I have a standalone httpd+Tomcat 8.5.65 installation on OpenJDK 11 with OpenCms 11.0.2 for my client's internal website. They have a LDAP network and they're requesting the automated logon using ...
user avatar
1 vote
0 answers
259 views

Apache reverse proxy with Kerberos authenticate and LDAP authorization

Server version: Apache/2.4.37 (Red Hat Enterprise Linux) Apache is launched as a container in the Openshift cluster. I am using Apache as a forward and reverse proxy for Kibana. Mandatory requirement ...
user avatar
  • 11
0 votes
0 answers
81 views

Login to SSL VPN via SSO and then use SSO inside VPN for other Service Providers possible?

I have a setup where you authorize via SAML SSO (keycloak as idp) to access a SSL VPN (fortigate as sp). Now inside the VPN there are authorization reverse proxy servers. Is it possible to have the ...
user avatar
  • 1
0 votes
1 answer
51 views

Does Windows SSO work with ADFS 2016 for OIDC Web Application?

Our web application uses OpenID-Connect (OIDC) Implicit Flow for user login with ADFS 2016. Login generally works, however users get login screen for user name and password. Does Windows-Login / SSO (...
user avatar
0 votes
2 answers
108 views

ADFS as proxy to some IDP

As far as I know, Exchange does support WS-Federation, but it does not support SAML. At the same time I have IDP that does support SAML, but does not support WS-Federation. Is it possible to configure ...
user avatar
  • 135
0 votes
0 answers
122 views

Configuring SSSD to do SSH SSO using Active directory

I am currently thinking about a solution to be able to SSH via kerberos using SSSD linked to an active directory without joining the machine to the domain. The main constraint is not to join the ...
user avatar
  • 1
0 votes
0 answers
111 views

Apache HTTPD Kerberos, silently redirect if no auth offered

I've configured Apache HTTPD as a reverse proxy (for SSL) for my Artifactory instance, and I'm now trying to get HTTP SSO working on it. Using the below configuration, I am successfully automatically ...
user avatar
  • 79
0 votes
1 answer
559 views

SAML 2.0 NameIDPolicy that was not satisfied by the issued token

I am working on a SAML integration with some monitoring software, but I keep receiving the MSIS7070 error below. I have tried numerous transform combinations with no luck. I am certain this is ...
user avatar
0 votes
0 answers
24 views

how to limit git bash to use https url alone and to use only one git platform to push the code to private repo?

We want to setup security to gitbash cli on our shared windows10 virtual desktop. Non-admin Users should use only https url (example: https://gitlab///). Using personal access tokens & ssh keys ...
user avatar
1 vote
0 answers
286 views

AWS SSO: Should I use Permission Sets or IAM Roles, or Both?

We have AWS accounts for dev, staging, and prod. We use AWS SSO via Okta, and define groups like "Developers" and "Support" in Okta. Developer group should have broad access to ...
user avatar
1 vote
0 answers
396 views

Office 365 with SSO, but needs email to be accessed via POP and send mails via SMTP

We are moving from Godaddy to Office 365. Many of our staff use Thunderbird and a few use Gmail to read office emails (collection emails via POP). Office 365 uses SSO by OneLogin to authenticate users....
user avatar
1 vote
0 answers
440 views

Linking authentication FreeIPA and SSO

Long story short, my goal is to have all user permissions managed in one place and then deployed everywhere. My thoughts are that Active Directory/FreeIPA is perfect for this sort of thing. It also ...
user avatar
0 votes
1 answer
398 views

What is the proper way to use IIS to forward the REMOTE_USER header to Tomcat?

I am trying to set up SSO with IIS 10 and Tomcat 9. I want to use Windows Authentication in IIS and pass the authenticated username to Tomcat. I had this working with Tomcat 8.5, however after ...
user avatar
  • 111
1 vote
0 answers
66 views

How to configure the apache authorization chain for Kerberos (mod_auth_kerb) and SSL?

What directives and conditions to configure the Apache configuration as follows: We try to authorize through Kerberos. If successful (What condition to use?), Then we redirect to URL1. Otherwise, we ...
user avatar
-1 votes
1 answer
179 views

With Microsoft 365 SSO. Delete user in third-party App when such user gets deleted in Active Directory

I have an application connected to Microsoft Active Directory using SSO. So basically users in the third-party App authenticate with Microsoft 365 using SSO however we would like to delete a user in ...
user avatar
  • 19
0 votes
0 answers
279 views

Why isn't Kerberos used for SSO to cloud apps?

When comparing Kerberos to SAML, a common argument on StackOverflow sites and the rest of Internet is that SAML is for Internet / cloud applications while Kerberos is for enterprise LAN. There are ...
user avatar
  • 167
1 vote
0 answers
29 views

Integrating GitHub Org with SAML shibboleth & post actions

I am at the beginner level of GitHub cloud administration and looking for answers to the below-listed questions after I enable SAML integration (Shibboleth) for my Github cloud Organisation. Before ...
user avatar
  • 11
0 votes
0 answers
155 views

IIS: Kerberos authentication only works from local machine

I'm setting up an IIS application on a server within my domain. I configured SPN's and settings to allow windows authentication to work with kerberos and Single Sign On, and everything works fine on ...
user avatar
-1 votes
1 answer
33 views

how we can generate the single sign on and reply url for new application in azure active directory

I am going to register a new application in the Azure active directory for SAML login. How can I generate my reply URL and single sign on url and entity ID ?
user avatar
1 vote
1 answer
70 views

graviteeio - management-rest-api oauth role mappings

Gravitee manager can be configured with keycloak authentication as described here. They state in their documentation, that role mapping could be addressed on their gravitee.yml configuration: security:...
user avatar
1 vote
0 answers
28 views

Created a new account in my Google Admin tenant, login always redirects to Microsoft's SSO page

I have a very old Google Admin tenant from when this service was still available for free. I don't use it for email anymore; my email is hosted on outlook.com now (another now-defunct free option). I ...
user avatar
1 vote
0 answers
36 views

How can I pass login_hint/authuser to Google IdP when using AWS SSO

I have configured AWS SSO to use Google as an IdP. It's working fine. However, since I have multiple google accounts I often have to go through the multiple login 'chooser'. When accessing Google ...
user avatar
  • 161
1 vote
0 answers
25 views

Windows ADFS User Certificate URL

I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS. I have setup User certificate enrollment. Everything work fine but I have a litle issue. I have setup ADFS ...
user avatar
1 vote
0 answers
1k views

curl not sending credentials during negotiation

We have a Jenkins server that uses Kerberos-SSO, with a fallback to Basic if SSO is not configured on the browser or using curl. When I use curl with the --negotiate argument, however, it doesn't send ...
user avatar
  • 514
0 votes
1 answer
784 views

IDP initiated SSO does not works on Win server 2016

I am trying to setup IdP initiated SSO on Windows Server 2016. I have configured the Relying party trust and the claim rules as well. I enabled the IdP Sign on page following - https://docs.microsoft....
user avatar
0 votes
1 answer
45 views

Single Sign On in Solarwinds Security events manager (SEM)

I am having an issue where I am getting a prompt from SEM web gui to provide my credentials. I provide credentials (we use both tokens and passwords).  It does not fail unless I close the prompt. LDAP ...
user avatar
0 votes
0 answers
439 views

Single sign on with Samba AD DC, Linux servers, GSSAPI/Kerberos and Windows clients that are not joined to the domain

Setup We have: a machine running Samba 4 on Debian Buster as AD DC. another Debian Buster machine running Samba 4 as file server, joined to the domain with net join and using winbind for ...
user avatar
0 votes
2 answers
150 views

How to have only one login for multiple websites on the same linux machine?

I'm having multiple websites (like mediawiki, gitea and kanboard) and I'm thinking about making the login the same on all services. But how do I do that? I looked at AD but I read that it's Windows ...
user avatar
  • 1
2 votes
2 answers
1k views

How can I resolve "SAML Providers must reference at least one SAML assertion issuer" message?

I want to setup a SSO solution using Keycloak 10.0.2 as the Identity Provider. The first application I want to setup is AWS. I followed this tutorial to enable Keycloak to sign me in using SAML. I ...
user avatar
1 vote
1 answer
55 views

SSO as a web frontend rather than as an external linked service

On one of our teams, we've been rapidly and individually developing or deploying a large number of dedicated web services. Some we build (using Django, Flask, Node, etc.), others are open source ...
user avatar
  • 61
0 votes
2 answers
76 views

Configuring Azure Console for _external_ authentication/SSO/IdP?

I'm looking for pointers on how to configure Azure "IAM" to trust an external IdP/Authentication server.... am trying to find my way around the docs for Azure which is... not easy. Help would be more ...
user avatar
  • 167
0 votes
0 answers
54 views

AzureAD OpenID Connect JWT "platf" claim value

I am setting up an application that will use AzureAD as an OpenID Connect IDP for authentication. I want to know if the authenticating device is an AzureAD "managed" or "compliant" device at the ...
user avatar
0 votes
1 answer
54 views

how to handle mixed domain (onprem and oncloud users)

i need to setup adfs to activate sso for an application. We need to use adfs because we have more tenands and subdomains. But my problem is, that we have some users existing only in cloud but not ...
user avatar
0 votes
1 answer
163 views

AzureAD IDP Initiated SAML always return nameid-format:persistent instead of nameid-format:emailAddress

I'm developing SSO using SAML and my IdP is Azure. I'm having problem with IDP Initiated flow. In SAML Response I always get this NameID: <NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:...
user avatar
  • 101
-1 votes
1 answer
32 views

How to enable Office 365 to work as Identity Provider

I'm trying to set up my application to use Office 365 as Identity Provider for Single Sign On but I can't find specific instructions to do so.
user avatar
0 votes
1 answer
494 views

How to raise the 100 users cap for GCP OAuth?

I've been trying to setup a "Sign in with Google" button on my WordPress website. In my GCP console I've setup the OAuth consent screen with all the data necessary, I've submitted the app for ...
user avatar
0 votes
1 answer
38 views

Azure AD SSO to Facebook if user is already logged in

Hi I'm in the IT dept. for a small charity. We use Facebook as a way to promote events to the local community. Our (few) volunteers have accounts in our 365, and use this to log in to everything. ...
user avatar
  • 13
5 votes
3 answers
14k views

Keycloak blank page behind nginx reverse proxy

After unpacking and starting keycloak to listen on 127.0.0.1, I configured nginx to work as a reverse proxy accessible from a publicly available domain via https. This is the nginx configuration: ...
user avatar
2 votes
1 answer
4k views

Keycloak x.509 certificate authentication

I'm trying to set up the following architecture but I'm struggling: Keycloak container with this image jboss/keycloak:7.0.0 Apache with mod_auth_openidc The apache has a protected directory Apache ...
user avatar
  • 21
0 votes
1 answer
87 views

Is there an SSO mechanism supported as widely as LDAP?

LDAP is pretty amazing. It lets you set up a bunch of web services that all share a common user database (or rather, directory), so you can have a WordPress installation, a NextCloud, a MediaWiki etc, ...
user avatar
1 vote
0 answers
76 views

Kerberos on NameBased vhosts with SSL

Im trying to figure out how to implement kerberos for SSO on sites that are using name based vhosts on apache ( linux server) e.g. Lets say that I have domains a.com and b.com. Both are set as ...
user avatar
0 votes
2 answers
50 views

Security when working on a users laptop with their credentials

We are implementing many services with kerberos and single sign on. A security concern has been raised relating to how we fix issues with our users laptops. Typically the user will leave a device ...
user avatar
1 vote
0 answers
17 views

Kerberos with HTTP Resource Server Login

I am having an http (IIS) resource server which uses Kerberos 5 for authentication. Every time I reach the page I need to key in my username and password but if I have done kinit in my machine (...
user avatar

1
2 3 4 5
7