Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Filter by
Sorted by
Tagged with
0
votes
0answers
229 views

Office 365 with SSO, but needs email to be accessed via POP and send mails via SMTP

We are moving from Godaddy to Office 365. Many of our staff use Thunderbird and a few use Gmail to read office emails (collection emails via POP). Office 365 uses SSO by OneLogin to authenticate users....
0
votes
0answers
38 views

Linking authentication FreeIPA and SSO

Long story short, my goal is to have all user permissions managed in one place and then deployed everywhere. My thoughts are that Active Directory/FreeIPA is perfect for this sort of thing. It also ...
1
vote
1answer
41 views

What is the proper way to use IIS to forward the REMOTE_USER header to Tomcat?

I am trying to set up SSO with IIS 10 and Tomcat 9. I want to use Windows Authentication in IIS and pass the authenticated username to Tomcat. I had this working with Tomcat 8.5, however after ...
1
vote
0answers
19 views

How to configure the apache authorization chain for Kerberos (mod_auth_kerb) and SSL?

What directives and conditions to configure the Apache configuration as follows: We try to authorize through Kerberos. If successful (What condition to use?), Then we redirect to URL1. Otherwise, we ...
0
votes
0answers
17 views

How to integrate jfrog artifactory login with sso to jenkins hosted on an AWS instance?

How to integrate jfrog artifactory login with sso to jenkins hosted on an AWS instance?? My Jenkins server running on EC2 instance. How to upload to jfrog artifactory with single sign on account?
-1
votes
1answer
173 views

With Microsoft 365 SSO. Delete user in third-party App when such user gets deleted in Active Directory

I have an application connected to Microsoft Active Directory using SSO. So basically users in the third-party App authenticate with Microsoft 365 using SSO however we would like to delete a user in ...
0
votes
0answers
67 views

Why isn't Kerberos used for SSO to cloud apps?

When comparing Kerberos to SAML, a common argument on StackOverflow sites and the rest of Internet is that SAML is for Internet / cloud applications while Kerberos is for enterprise LAN. There are ...
1
vote
0answers
19 views

Integrating GitHub Org with SAML shibboleth & post actions

I am at the beginner level of GitHub cloud administration and looking for answers to the below-listed questions after I enable SAML integration (Shibboleth) for my Github cloud Organisation. Before ...
0
votes
0answers
49 views

IIS: Kerberos authentication only works from local machine

I'm setting up an IIS application on a server within my domain. I configured SPN's and settings to allow windows authentication to work with kerberos and Single Sign On, and everything works fine on ...
0
votes
0answers
17 views

Azure MFA Server SSO to User Portal

Users within the on-prem Azure MFA Server are created manually with a pre-defined second-factor. The 2FA validated when users are accessing an application, it calls for MFA through Website SDK. MFA ...
0
votes
0answers
23 views

SSO for SharePoint with Multiple domains

We are planning to deploy on-prem SharePoint, the challenge is. These are all external users who will be our SharePoint. How we enabled SSO, these users will be coming from the different-different ...
-1
votes
1answer
32 views

how we can generate the single sign on and reply url for new application in azure active directory

I am going to register a new application in the Azure active directory for SAML login. How can I generate my reply URL and single sign on url and entity ID ?
1
vote
1answer
38 views

graviteeio - management-rest-api oauth role mappings

Gravitee manager can be configured with keycloak authentication as described here. They state in their documentation, that role mapping could be addressed on their gravitee.yml configuration: security:...
0
votes
0answers
22 views

Does SSO still works for a user present in 2 differents Realms with Keycloak?

If I have 2 realms in keycloak : REALM1 are going to be connected to LDAP1, LDAP2 and Google open id REALM2 are going to be connected to LDAP1 and ActiveDirectory1 If I have a user in LDAP1 : will I ...
1
vote
0answers
22 views

Created a new account in my Google Admin tenant, login always redirects to Microsoft's SSO page

I have a very old Google Admin tenant from when this service was still available for free. I don't use it for email anymore; my email is hosted on outlook.com now (another now-defunct free option). I ...
1
vote
0answers
28 views

How can I pass login_hint/authuser to Google IdP when using AWS SSO

I have configured AWS SSO to use Google as an IdP. It's working fine. However, since I have multiple google accounts I often have to go through the multiple login 'chooser'. When accessing Google ...
0
votes
0answers
22 views

WSO2 5.3.0 How to Change Resident IdP SAML2 URLs

We have WSO2 Identity Server 5.3.0 running behind a load balancer. When I first set it up in our staging environment, I used the local server name in all of the configs, but later changed these to ...
1
vote
0answers
24 views

Windows ADFS User Certificate URL

I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS. I have setup User certificate enrollment. Everything work fine but I have a litle issue. I have setup ADFS ...
0
votes
0answers
24 views

Dual-tenant authentication to Azure App Service

I have an App Service (LAMP stack). Users from two Azure Active directories (AADs, tenants) should be able to visit this webapp. The rest of the world should not have access. What's the best way to ...
1
vote
0answers
503 views

curl not sending credentials during negotiation

We have a Jenkins server that uses Kerberos-SSO, with a fallback to Basic if SSO is not configured on the browser or using curl. When I use curl with the --negotiate argument, however, it doesn't send ...
0
votes
0answers
148 views

Apache authentication separation causing slowdown and multiple cred requests

<Location ~ ^[\/]{0,1}(favicon|git|jclouds|login|static)(.*)$> Require all granted Satisfy any </Location> <Location /crumbIssuer> AuthType Basic AuthName "Company ...
0
votes
0answers
24 views

IIS Server Farm Dropping Server Variables From SSO

I have an application that looks for server variables such as REMOTE_USER provided by Single Sign On. I have IIS acting as a reverse proxy to my application which is in a server farm. If I create a ...
0
votes
0answers
27 views

Buffalo Terastation LDAP

We have an LDAP server which each client machine can use for user Sign on. We then have a Buffalo Terastation NAS which we would like to use the LDAP user and permissions. Has anyone done this before? ...
0
votes
1answer
706 views

IDP initiated SSO does not works on Win server 2016

I am trying to setup IdP initiated SSO on Windows Server 2016. I have configured the Relying party trust and the claim rules as well. I enabled the IdP Sign on page following - https://docs.microsoft....
0
votes
1answer
25 views

Single Sign On in Solarwinds Security events manager (SEM)

I am having an issue where I am getting a prompt from SEM web gui to provide my credentials. I provide credentials (we use both tokens and passwords).  It does not fail unless I close the prompt. LDAP ...
0
votes
0answers
216 views

Single sign on with Samba AD DC, Linux servers, GSSAPI/Kerberos and Windows clients that are not joined to the domain

Setup We have: a machine running Samba 4 on Debian Buster as AD DC. another Debian Buster machine running Samba 4 as file server, joined to the domain with net join and using winbind for ...
0
votes
2answers
68 views

How to have only one login for multiple websites on the same linux machine?

I'm having multiple websites (like mediawiki, gitea and kanboard) and I'm thinking about making the login the same on all services. But how do I do that? I looked at AD but I read that it's Windows ...
2
votes
2answers
666 views

How can I resolve “SAML Providers must reference at least one SAML assertion issuer” message?

I want to setup a SSO solution using Keycloak 10.0.2 as the Identity Provider. The first application I want to setup is AWS. I followed this tutorial to enable Keycloak to sign me in using SAML. I ...
1
vote
1answer
53 views

SSO as a web frontend rather than as an external linked service

On one of our teams, we've been rapidly and individually developing or deploying a large number of dedicated web services. Some we build (using Django, Flask, Node, etc.), others are open source ...
0
votes
2answers
65 views

Configuring Azure Console for _external_ authentication/SSO/IdP?

I'm looking for pointers on how to configure Azure "IAM" to trust an external IdP/Authentication server.... am trying to find my way around the docs for Azure which is... not easy. Help would be more ...
0
votes
0answers
50 views

AzureAD OpenID Connect JWT “platf” claim value

I am setting up an application that will use AzureAD as an OpenID Connect IDP for authentication. I want to know if the authenticating device is an AzureAD "managed" or "compliant" device at the ...
0
votes
1answer
52 views

how to handle mixed domain (onprem and oncloud users)

i need to setup adfs to activate sso for an application. We need to use adfs because we have more tenands and subdomains. But my problem is, that we have some users existing only in cloud but not ...
0
votes
1answer
95 views

AzureAD IDP Initiated SAML always return nameid-format:persistent instead of nameid-format:emailAddress

I'm developing SSO using SAML and my IdP is Azure. I'm having problem with IDP Initiated flow. In SAML Response I always get this NameID: <NameID Format="urn:oasis:names:tc:SAML:2.0:nameid-format:...
-1
votes
1answer
31 views

How to enable Office 365 to work as Identity Provider

I'm trying to set up my application to use Office 365 as Identity Provider for Single Sign On but I can't find specific instructions to do so.
0
votes
1answer
328 views

How to raise the 100 users cap for GCP OAuth?

I've been trying to setup a "Sign in with Google" button on my WordPress website. In my GCP console I've setup the OAuth consent screen with all the data necessary, I've submitted the app for ...
0
votes
1answer
26 views

Azure AD SSO to Facebook if user is already logged in

Hi I'm in the IT dept. for a small charity. We use Facebook as a way to promote events to the local community. Our (few) volunteers have accounts in our 365, and use this to log in to everything. ...
2
votes
3answers
8k views

Keycloak blank page behind nginx reverse proxy

After unpacking and starting keycloak to listen on 127.0.0.1, I configured nginx to work as a reverse proxy accessible from a publicly available domain via https. This is the nginx configuration: ...
2
votes
1answer
3k views

Keycloak x.509 certificate authentication

I'm trying to set up the following architecture but I'm struggling: Keycloak container with this image jboss/keycloak:7.0.0 Apache with mod_auth_openidc The apache has a protected directory Apache ...
0
votes
1answer
79 views

Is there an SSO mechanism supported as widely as LDAP?

LDAP is pretty amazing. It lets you set up a bunch of web services that all share a common user database (or rather, directory), so you can have a WordPress installation, a NextCloud, a MediaWiki etc, ...
1
vote
0answers
71 views

Kerberos on NameBased vhosts with SSL

Im trying to figure out how to implement kerberos for SSO on sites that are using name based vhosts on apache ( linux server) e.g. Lets say that I have domains a.com and b.com. Both are set as ...
0
votes
2answers
45 views

Security when working on a users laptop with their credentials

We are implementing many services with kerberos and single sign on. A security concern has been raised relating to how we fix issues with our users laptops. Typically the user will leave a device ...
1
vote
0answers
16 views

Kerberos with HTTP Resource Server Login

I am having an http (IIS) resource server which uses Kerberos 5 for authentication. Every time I reach the page I need to key in my username and password but if I have done kinit in my machine (...
2
votes
2answers
1k views

Is there a way to setup oAuth with Openvpn or wireguard?

I'm looking to build a set of services that require a single sign on. Basically, you login to my oAuth provider, and you have access to an openvpn connection(or wireguard) and a website, without ...
0
votes
1answer
16 views

Is Azure AD suitable for a public network of apps?

We are currently using Office 365 with Azure AD to manage our user management (currently about 100 users and 20 groups) in the AD. Our semi-public apps are currently using either a 3rd party user ...
1
vote
1answer
186 views

Keycloak SSO minimum mysql database privileges

I have been trying to install Keycloak but instead of the usual 'GRANT ALL PRIVILEGES' command to grant access to the database to the MySQL database, I need the exact minimum privileges to be granted. ...
0
votes
1answer
398 views

Kerberos: Wrong principal / realm for ssh-server login on a server in a subdomain

I currently try so setup the kerberos auth on a server living in a sub domain "sub.example.com". The KDC manages EXAMPLE.COM together with a dns server which manages 'example.com'. Due to ...
0
votes
1answer
351 views

InitializeSecurityContext failed with SEC_E_DOWNGRADE_DETECTED

I have a question. There's a client and server apps written in Java. Java client connects to server using kerberos authentication, the client need to retrieve a token from the server - it uses Waffle ...
0
votes
0answers
78 views

SSO for ADFS works on some desktops, but does not on some others

We have a weird issue with SSO through ADFS 3 on Windows Server 2016. While some Windows 10 clients can successfully login in IE, some cannot. All Windows 10 clients are at the same patch level. The ...
1
vote
1answer
140 views

How can I achieve SSO to Windows RDS Services using Google Identity / GSuite?

My org is almost exclusively Linux and Mac based. We have all of our internal services configured to use our GSuite logins for identity and auth. Now we need to use a Windows application, and I'd ...
1
vote
1answer
2k views

Keycloak - Null Pointer Exception when trying to map client role to a user

Hopefully someone proficient with Keycloak can help me on this issue. How to replicate: Search for a user, then go to Role Mappings > Client Roles > select the client (let's call it Portal-app for ...

1
2 3 4 5
7