Collaborate Disseminate
In the last few years, SSO protocols like OAuth and SAML are becoming increasingly used to enable 3rd parties access some user’s resources from some service without the need for user to provide credentials to the 3rd party.
… Continue reading Is there a way to tell if an Android app really uses SSO(Single Sign On)?
I am trying to get shibboleth configured. When I go to https://mysite/secure/index.php, it works properly, I can authenticate, etc. but when I go to https://mysite/Shibboleth.sso/Status (or any other https://mysite/Shibbolet… Continue reading SHIBBOLETH SP – Shibboleth handler invoked at an unconfigured location – Shibboleth.sso/Session/
An external application (B) requires a SAML token to allow users who log into my application (A) to access it directly without having to log in again. This access is not built yet. My organization has an existing SSL certific… Continue reading Can an SSL certificate be used to generate a SAML token
In my company, we configure SAML2 SSO for all applications, but I have a problem with an application that not support SAML2 but only Kerberos.
How can I create a workaround?
After reading the spec I’m unclear on the appropriate use of validUntil and cacheDuration in SAML metadata. Is there any danger in having a validUntil value a year or more into the future?
For example, if I am publishing a s… Continue reading Appropriate use of validUntil and cacheDuration in metadata
I’m looking for ways of integrating ADFS as a IDP for a SAML2 service provider. I have already configured the SAML2 provider with the verification certificates etc. And we used “Add Relying Party Trust Wizard” to configure AD… Continue reading Can we configure ADFS for IDP initiated SSO [migrated]
I am thinking how to gain and analyze the information in the real SSO (request/response) messages, for some commercial SSO solutions.
The challenge is that most commercial SSO solutions are black-box or gray-box. I know the … Continue reading Is it possible to analyze real Single Sign-On (SSO) messages via network sniffing?
What are the methods we can use to verify Identity Provider in Identity Provider initiated login in SAML2 Single sign on (SAML2 SSO)? Can any one who has access to IDP private key are able to create a trusted connection to SP… Continue reading Verification methods of IDP in SAML2 IDP initiated login