Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Filter by
Sorted by
Tagged with
0
votes
2answers
569 views

Outlook Simplified Account Creation wizard doesn't perform autodiscover look up

I was migrating users from Google G-Suite (Google Apps) to Office 365 Exchange Online using the following scenario: Keep MX records at Google for coexistence (accounts co-exist at both Google and M$) ...
0
votes
0answers
381 views

401 Unauthorized in OWA 2013 when login through AD FS

I have an Exchange 2013 server setup to Single Sign-On through an AD FS setup. The whole workflow goes fine with the redirection to AD FS and after AD FS, a WS-Federation response is sent to OWA. ...
0
votes
0answers
81 views

Is G Suite as a SAML IdP a replacement for Okta?

G Suite supports acting as the identity provider to SAML-compatible service providers, in the same way as Okta does. However, you pay a premium for Okta whereas Google SAML is included in the G Suite ...
1
vote
2answers
714 views

Federated SSO to AWS using CLI

We have successfully setup an external idP using google and connected it to AWS. Our users now have Federated SSO with AWS and can easily log into the web console with SAML 2.0 federation Role we ...
0
votes
1answer
968 views

Making an HTTP Request for an ADFS IP, Getting “There are no registered protocol handlers”

I am trying to use the passive requester protocol defined in http://docs.oasis-open.org/wsfed/federation/v1.2/ws-federation.html To do this, I am making the GET Request: curl -X GET -k -i 'https://...
1
vote
0answers
31 views

How to move from a physical AD network towards a hybrid Azure network

I'm just looking for some guidance here. Maybe a, "Hey, check out this link/book/video that shows how to get started with Azure" Everything I've found on the web is either too specific or too general ...
0
votes
0answers
621 views

Apache Single Sign On Working on 1 of 2 Portals

I use a helpdesk system in our intranet that I've configured for Single-Sign-On via LDAP/Active Directory. The helpdesk server itself lives on an Ubuntu 16.04 Server box running on Apache, Server ...
1
vote
1answer
782 views

how authenticated multiple subdomains in nginx with one login

we've got app consisting of several parts. Each part is running on it's subdomain (nginx site). We would like to hide access of dev env behind some shared auth, where first login on whatever of ...
0
votes
1answer
903 views

Setting nameid-format:persistent in SimpleSAML request

I'm setting up a single-sign-on (as service provider) via SimpleSAML. After importing the Metadata from the identity provider's XML, the first redirect worked. However, the login fails with a ...
0
votes
1answer
1k views

Duplicate SPN's - ADFS

Trying to setup ADFS with AD Connect. I get an error message when trying to add the ADFS service account. The error states that there is already an existing service account in the directory with the ...
0
votes
0answers
619 views

Apache Kerberos SSO without login prompt

I've successfull implemented SSO with Kerberos an a apache webserver. Whenever a user opens the webpage, he is prompted to enter his credentials (username@REALM & password). Is there a possibility ...
2
votes
1answer
10k views

Password reset not working because password writeback not working in portal.azure.com

I have a problem with portal.azure.com user password reset. I have configured hybrid identity with single sign on in azure AD and onpremis AD. The connection was made via Azure AD Connect. The ...
0
votes
1answer
336 views

Remote Desktop SSO 2012 R2

The client and server are using Active Directory - when connecting using Remote Desktop, "Your Windows logon credentials will be used to connect" is shown but the login screen is still being shown. Re-...
1
vote
0answers
3k views

HTTPS to HTTP SAML SSO using mod_auth_mellon

I have a simple HTTPS to HTTP reverse proxy using Apache HTTPD (CentOS) I have enabled mod_auth_mellon for SAML SSO, it works fine if I have a simple http proxy without any virtual host. When I ...
1
vote
1answer
655 views

nginx proxy server setting request url for subsequent request

server { server_name 127.0.0.1; listen 3000; location = /auth { internal; proxy_pass http://127.0.0.1:8088/auth; } location / { auth_request /auth; ...
1
vote
1answer
156 views

Shibboleth return url does not work over subdirectory?

We are trying to install Shibboleth for the first time and we got everything working perfectly when applying single sign for a website over a top level domain, but not under a sub directory. Here is ...
0
votes
0answers
2k views

SAML error for SSO with ADFS - MSIS0038: SAML Message has wrong signature

Hi I am trying to use SSO to authenticate my client's users directly to my website. My client's IDP is Microsoft ADFS and I am using Passport-SAML (https://github.com/bergie/passport-saml) to ...
1
vote
1answer
1k views

SPN generation for multiple service account on a Web server

I am trying to achieve Azure SSO in my organisation. I have a web server hosting multiple websites and web application under those sites. Users access them in below fashion https:// < SiteName >...
0
votes
0answers
2k views

Getting 404 for URL /adfs/ls in SP initiated sign on

I have done configurations to set up SSO using ADFS (on windows server 2012 R2) and shibboleth (on Ubuntu 12.x box). Whenever I do SP initiated sign on i.e. https://mywebapp.com/authsml; the URL gets ...
0
votes
1answer
599 views

Getting junk while accessing federationMetadata.xml on Windows server 2012 R2

I have setup ADFS on windows server 2012R2 using self signed certificate. ADFS has been installed successfully. But when I try to access the federationMetadata.xml using https:///FederationMetadata/...
1
vote
1answer
68 views

customise saml attributes Azure AD

I have configured SAML SSO against a new app in my Azure Console. I have proven it authenticates using simplesamlPHP. I am trying to add/adjust the attributes that are passed back with the SAML token. ...
1
vote
1answer
2k views

Where are 'DeviceContext' claims when using alternate browser in ADFS 4.0?

I know this is probably not the best place to ask this question. But, after days of working on this, and having posted in the Microsoft Forum, I'm at my wits end. We are utilizing a hybrid ADFS 4.0 (...
0
votes
0answers
182 views

Getting windows store to send Kerberos ticket to Azure AD for SSO

I have managed to get Azure AD Connect Installed, I can connect via smart links to office online etc via sso, however, upon logging into Windows 10 for the first time, Users are prompted to login to ...
2
votes
1answer
1k views

Combine apache auth providers of different types with basic auth only if proactively provided by client

I'd like to be able to have a path on an apache server (2.4.18+ on ub16) that primarily authenticates using SAML (using the mod_auth_mellon plugin) for interactive use, but also supports having the ...
1
vote
1answer
2k views

Publishing of Windows 2016 Server RemoteApp and automatic delivery of icons to the Start Menu doens't work

I'm trying to setup a lab with a VM hosting all the roles for Windows 2016 Server Remote Desktop Services (CB, SH, WA) to publish few apps to be delivered to Windows 10 Professional Clients. All ...
0
votes
1answer
192 views

How to configure AssertionConsumerServiceIndex processing in Okta?

In my Okta App I set up Single sign on URL and a couple of Requestable SSO URLs. The idea is that I send a SAML message with index, and Okta chooses one of requestable SSO urls to send a response. ...
0
votes
2answers
173 views

SSO infrastructure for Linux+Win clients

I currently have an office network revolving essentially around three services, all hosted under Linux: Shared storage area served via Samba. Mail Web/IMAP handled by Zimbra. Project management/...
0
votes
1answer
2k views

.NET Issue on ADFS SSO behind a Reverse Proxy

I have a .NET application that uses ADFS for SSO. It works when I test it on my local machine and test environment but it fails when deployed to the client environment. The client environment is like ...
1
vote
0answers
318 views

Wordpress SSO without using 3rd party plugins on Azure, is it possible?

I'm setting up a Wordpress installation on Azure which is using an external ADFS provider for single sign-on. Up to now, the Wordpress installation was self-hosted and used the miniOrange wordpress ...
0
votes
1answer
875 views

Azure AD SAML2 SSO issues wrong AuthnInstant in SAMLResponse

I'm integrating my application with MS Azure AD IDP for SAML2 IDP-initiated single sign on. I am using my company's Office 365 account and Azure AD service accessible through it. In my test ...
0
votes
0answers
329 views

ADFS 4.0 Windows 10 1703 SSO

We have recently updated most of our clients to windows 10 1703 and updated ADFS from 3.0 to 4.0 via farm migration. Any client running Windows 7 or 10 1607 still works as expected and external access ...
0
votes
0answers
135 views

Identity providers for SSO and untrusted sites

I am implementing SSO between a custom PHP app and an in house tableau server using SAML. I chose auth0 as my identity provider. I got it working with a test version of the app running in a Vagrant VM....
1
vote
0answers
151 views

Enabling AAD federated SSO for Google compute engine app

I have a Webapp hosted on Google compute engine. I am trying to list it on Microsoft AppSource. One of the mandatory conditions for listing is enabling of Azure Active Directory federated Single Sign-...
0
votes
1answer
115 views

What is the purpose of the 'keyblock' part of the Kerberos credential cache

The documentation of MIT Kerberos explains here how the credential cache file is formatted. It basically consists of: a header information about the REALM and the user a keyblock information about ...
1
vote
2answers
136 views

Questions about user authentication strategies

I am currently re-doing the IT infrastructure at my company. It's currently all over the place, so I'm trying to re-organise everything from the ground up. First thing I thought I would tackle is ...
2
votes
1answer
3k views

Problems connecting to a freeIPA client host via ssh

I am trying to set up an IPA environment with a CentOS 7.3 server and clients and I am experiencing a behavior that I am not able to understand. I am using IPA version 4.4.0. I was able to run ipa-...
2
votes
1answer
4k views

Sync AD from multiple on-premise server to Office 365

I want to migrate active directory accounts from multiple on-premise servers (located on different location and having same domain name) to Office 365. I am using Azure AD Connect to sync these ...
0
votes
0answers
300 views

Is there a way to detect server ip in nginx configuration file?

I'm using nginx/1.12.0 and tried $server_addr directive but it gives me an error: nginx: [emerg] invalid parameter "$server_addr" in /etc/nginx/sites-enabled/conf Here is my code nginx conf ...
1
vote
1answer
2k views

windows 2016 rdp sso displays other user login

We have a Windows 2016 server where we want to add Single Sign-On, but when I add the server to the local GPO of my computer and try to log on, I get a screen with an empty user field. I have tried ...
0
votes
1answer
216 views

AAD Connect and Pass Through authentication

was wondering if anyone has any practical experience with enabling SSO via AADConnect and the new pass-through authentication - https://docs.microsoft.com/en-us/azure/active-directory/connect/active-...
4
votes
1answer
5k views

How to force kerberos to use in memory credential cache?

MIT Kerberos supports multiple types of credential cache to store tickets . For example, if I want to use a persistent keyring per-user in kernel memory I can add the following to krb5.conf. [...
5
votes
3answers
6k views

MIT Kerberos keeps asking for password when authenticating to OpenSSH

I am trying to setup a simple Kerberos environment which consists of a Kerberos server (KDC), a client machine and a server machine running an OpenSSH daemon. The client is supposed to be ...
2
votes
1answer
2k views

How to change ccache type of MIT Kerberos

The MIT Kerberos Documentation lists seven different ways to store Kerberos credentials: API DIR FILE KCM KEYRING MEMORY MSLSA At the moment my Kerberos setup is storing credentials in a file in the ...
2
votes
1answer
784 views

Which servers to copy keytab file to

I am trying to setup a simple Kerberos environment in which a client server authenticates to a webservice (in my case OpenSSH) via a Kerberos server. I generated a keytab file on the KDC but am not ...
3
votes
1answer
1k views

Using Google Apps / G Suite as IdP for Office365

I'm trying to set up SAML SSO where G Suite is the identity provider for Office 365 (service provider). Google's instructions are limited: https://support.google.com/a/answer/6363817?hl=en But I ...
1
vote
1answer
665 views

Google Apps with AD FS 3.0 Sign out problems

We have a Google Apps account that we use for most of our work. We also use AD FS 3.0 as an SSO provider to authenticate users. Everything works great with the sign in process. However when signing ...
2
votes
0answers
95 views

Is it possible to sign into Chrome Browser from a users OS authentication?

I am curious if it would be possible to sign users into their Chrome Browsers on Windows and/or Mac automatically when they sign in to their AD account. Our G Suite account syncs all data from our AD ...
0
votes
1answer
125 views

Using Google Sign-In seamlessly across subdomains and projects

I'm using a single Google Sign In Client ID across multiple google cloud projects and subdomains. The Google Sign In OAuth is set up in project A, which is served at subdomain1.commondomain.com. The ...
3
votes
1answer
4k views

Can we configure ADFS for IDP initiated SSO

I'm looking for ways of integrating ADFS as a IDP for a SAML2 service provider. I have already configured the SAML2 provider with the verification certificates etc. And we used "Add Relying Party ...
0
votes
0answers
165 views

Office365 federated domain and access using password

I have the following setup I had a usual Managed domain I added Office365 users through Office365 admin console (including their emails and passwords). I checked that I can configure my iOS Native ...

1
2
3 4 5
7