Collaborate Disseminate
I’m encountering an issue with the implementation of Single Sign-On (SSO) in our WPF application, and I’d appreciate some guidance or insights from the community.
Here’s a breakdown of our setup:
We have a main WPF application that utiliz… Continue reading Issue with Single Sign-On (SSO) Implementation for WPF application with ADFS/MSAL
I have a requirement to extend a quality assurance process in the customers CRM system so that when the user enters some data he or she is prompted to a screen with username and password and the already logged in user is again verified. Yo… Continue reading Verify user credentials via SAML (E-Signature)
We use ADFS within our organisation, and it is available via HTTP externally.
All of the applications we protect with ADFS are SP-initiated, so I want to disallow requests to ADFS other than SP-initiated SSOs. (e.g. https://adfs.mydomain.c… Continue reading Secure ADFS behind HAProxy
Question
In Saml Federation, can one Idp serve as a front-end proxy for authentication against multiple "back end" IdP’s
Context
our multi-tenant application suports SAML for Authentation and user provisioning
…and allows &qu… Continue reading in Saml Federation, can one Idp serve as a facade for authentication against multiple "back end" IdP’s
I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn’t ask for credentials. Context:
ADFS is owned by corp global IT team and c… Continue reading Implement SSO between a custom app and Microsoft 365 with custom identity provider [migrated]
I am so confused about this certification involvement between CF and ADFS talk. When we click on "Generate SP" on ColdFusion administrator, it does create a .p12 file but on the ADFS side, it only accepts a .cer file. So not sure… Continue reading ADFS and ColdFusion setup regarding certificate [migrated]
I have a CA and an Active Directory + ADFS instances set up on a Windows Server 2016 machine. I issued a client certificate for one of the users (for smart card logon) and then revoked it. However, I’m still able to log in via the revoked … Continue reading Revoked certificate not getting into Microsoft CA CRL
Is traditional CSRF PoC (e.g. described here) effective for testing in this environment
Specifically if PoC only involved one account – of course, given presence of ADFS SSO…so not counting the final 3 steps described above.
Azure Active Directory generates certificates for federated SSO that have a lifespan of 3 years.
in the case of an on premises AD, this is two years by default, and can be changed.
Are there any technical/security reasons why such a length… Continue reading Are there specific reasons why ADFS certificates are generated for 2 years?
My employer recently informed me that it has set up a Docusign account that is linked to my Active Directory (ADFS) account. I would login using the same login credentials as my employer’s active directory (Windows) username and password. … Continue reading How Safe Is a Docusign Active Directory Login?