Collaborate Disseminate
I have a requirement to extend a quality assurance process in the customers CRM system so that when the user enters some data he or she is prompted to a screen with username and password and the already logged in user is again verified. Yo… Continue reading Verify user credentials via SAML (E-Signature)
What alternatives for authentication and authorization technologies besides OAuth, SAML, OpenID Connect, and WebAuthn can be used for cloud apps?
I am currently writing my thesis and would like to look into the future and see if there are … Continue reading alternatives for OAuth, SAML, OpenID Connect, and WebAuthn [closed]
We have an existing SP called S1 that authenticates to multiple Idps. We have another service called S2, I want S2 to delegate authentication to S1 then to Idp, then back and notify S2 when authentication succeeds. Its important to note th… Continue reading How to delegate SAML2 authentication between Service Providers (SPs)?
According this change here, .NET Core will handle imports of X509 certificates differently.
Using .NET 6, for the value of System.Security.Cryptography.Pkcs12UnspecifiedPasswordIterationLimit, we either have to specify -1 to ignore this ch… Continue reading How to handle KB5025823 X509 changes correctly?
I have an issue where I am using SAML (Sustainsys.Saml2 library) and Username + Password through Auth0. Both these authentication methods are currently not working right because after the user is sent to the SAML/Auth0 authorization pages,… Continue reading User being redirected to Private IP Address instead of staying on the domain/subdomain [closed]
I have an iDP, a server and a browser-based client application executing the SAML flow to get the assertion sent to the server. Communication between client and server and iDP is HTTPS. All that is normal.
Now I have another non-browser-ba… Continue reading Security concerns to proxy a SAML flow via regular HTTP basic authentication
We use ADFS within our organisation, and it is available via HTTP externally.
All of the applications we protect with ADFS are SP-initiated, so I want to disallow requests to ADFS other than SP-initiated SSOs. (e.g. https://adfs.mydomain.c… Continue reading Secure ADFS behind HAProxy
Question
In Saml Federation, can one Idp serve as a front-end proxy for authentication against multiple "back end" IdP’s
Context
our multi-tenant application suports SAML for Authentation and user provisioning
…and allows &qu… Continue reading in Saml Federation, can one Idp serve as a facade for authentication against multiple "back end" IdP’s
I am in the process of building an integration between 2 service providers (SP). I have setup my own Identity Provider, KeyCloak.
What I am trying to achieve is as follows: A user signs into SP1 using SSO, they get redirected to our IDP to… Continue reading SAML Authentication Across multiple Service providers
I have an IdP who produces metadata federation XML files where the <OrganizationURL /> element is empty. See the example below:
<Organization>
<OrganizationName xml:lang="en">Example Co</OrganizationName&… Continue reading Is an empty `<OrganizationURL />` within a Federation Metadata XML file considered invalid?