Collaborate Disseminate
We have an existing SP called S1 that authenticates to multiple Idps. We have another service called S2, I want S2 to delegate authentication to S1 then to Idp, then back and notify S2 when authentication succeeds. Its important to note th… Continue reading How to delegate SAML2 authentication between Service Providers (SPs)?
According this change here, .NET Core will handle imports of X509 certificates differently.
Using .NET 6, for the value of System.Security.Cryptography.Pkcs12UnspecifiedPasswordIterationLimit, we either have to specify -1 to ignore this ch… Continue reading How to handle KB5025823 X509 changes correctly?
I have an issue where I am using SAML (Sustainsys.Saml2 library) and Username + Password through Auth0. Both these authentication methods are currently not working right because after the user is sent to the SAML/Auth0 authorization pages,… Continue reading User being redirected to Private IP Address instead of staying on the domain/subdomain [closed]
I have an iDP, a server and a browser-based client application executing the SAML flow to get the assertion sent to the server. Communication between client and server and iDP is HTTPS. All that is normal.
Now I have another non-browser-ba… Continue reading Security concerns to proxy a SAML flow via regular HTTP basic authentication
We use ADFS within our organisation, and it is available via HTTP externally.
All of the applications we protect with ADFS are SP-initiated, so I want to disallow requests to ADFS other than SP-initiated SSOs. (e.g. https://adfs.mydomain.c… Continue reading Secure ADFS behind HAProxy
Question
In Saml Federation, can one Idp serve as a front-end proxy for authentication against multiple "back end" IdP’s
Context
our multi-tenant application suports SAML for Authentation and user provisioning
…and allows &qu… Continue reading in Saml Federation, can one Idp serve as a facade for authentication against multiple "back end" IdP’s
I am in the process of building an integration between 2 service providers (SP). I have setup my own Identity Provider, KeyCloak.
What I am trying to achieve is as follows: A user signs into SP1 using SSO, they get redirected to our IDP to… Continue reading SAML Authentication Across multiple Service providers
I have an IdP who produces metadata federation XML files where the <OrganizationURL /> element is empty. See the example below:
<Organization>
<OrganizationName xml:lang="en">Example Co</OrganizationName&… Continue reading Is an empty `<OrganizationURL />` within a Federation Metadata XML file considered invalid?
I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn’t ask for credentials. Context:
ADFS is owned by corp global IT team and c… Continue reading Implement SSO between a custom app and Microsoft 365 with custom identity provider [migrated]
I would like to make sure that SAML login is secure. Company mandates to sign and encrypt SAML, and most of the assertions are encrypted and signed already, although I have received an answer from a well known auth provider, when I asked a… Continue reading SAML AuthnRequest encryption