Collaborate Disseminate
I have an iDP, a server and a browser-based client application executing the SAML flow to get the assertion sent to the server. Communication between client and server and iDP is HTTPS. All that is normal.
Now I have another non-browser-ba… Continue reading Security concerns to proxy a SAML flow via regular HTTP basic authentication
We use ADFS within our organisation, and it is available via HTTP externally.
All of the applications we protect with ADFS are SP-initiated, so I want to disallow requests to ADFS other than SP-initiated SSOs. (e.g. https://adfs.mydomain.c… Continue reading Secure ADFS behind HAProxy
Question
In Saml Federation, can one Idp serve as a front-end proxy for authentication against multiple "back end" IdP’s
Context
our multi-tenant application suports SAML for Authentation and user provisioning
…and allows &qu… Continue reading in Saml Federation, can one Idp serve as a facade for authentication against multiple "back end" IdP’s
I am in the process of building an integration between 2 service providers (SP). I have setup my own Identity Provider, KeyCloak.
What I am trying to achieve is as follows: A user signs into SP1 using SSO, they get redirected to our IDP to… Continue reading SAML Authentication Across multiple Service providers
I have an IdP who produces metadata federation XML files where the <OrganizationURL /> element is empty. See the example below:
<Organization>
<OrganizationName xml:lang="en">Example Co</OrganizationName&… Continue reading Is an empty `<OrganizationURL />` within a Federation Metadata XML file considered invalid?
I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn’t ask for credentials. Context:
ADFS is owned by corp global IT team and c… Continue reading Implement SSO between a custom app and Microsoft 365 with custom identity provider [migrated]
I would like to make sure that SAML login is secure. Company mandates to sign and encrypt SAML, and most of the assertions are encrypted and signed already, although I have received an answer from a well known auth provider, when I asked a… Continue reading SAML AuthnRequest encryption
I was wondering if it is possible to combine SAML 2.0 SSO with QR Code scanning or fundamentally it is not possible?
If a session exists in one device the user can scan it with her chell phone and login instantly. Something similar is foun… Continue reading Is it possible to combine SAML 2.0 SSO with session login of QR Code
I am so confused about this certification involvement between CF and ADFS talk. When we click on "Generate SP" on ColdFusion administrator, it does create a .p12 file but on the ADFS side, it only accepts a .cer file. So not sure… Continue reading ADFS and ColdFusion setup regarding certificate [migrated]
SAML Response + SAML Assertion are both signed individually while sending back the response.
But the SAML Response contains the SAML Assertion. The latter is actually a subset of the former. Then what is the use of signing both separately?… Continue reading In a SAML Response what is the need to sign both things, the complete SAML Response and the SAML Assertion?