Questions tagged [openid]

OpenID is an open standard that allows users to be authenticated by co-operating sites

OpenID logo

OpenID is an open standard that allows users to identify themselves to websites by means of a URL which either points directly to an OpenID authenticator, or points to to a page which contains redirection details to such an authenticator. The original website can know with confidence that the user has authenticated themselves to the delegated site, but doesn't know any of the tokens that were used by the user to perform this authentication.

OpenID differs from or in that the user controls which authentication engine is used, and no information other than the success or failure of the authentication is passed to the calling website.

OpenID allows you to use an OpenID account to sign in to multiple websites, without needing to create new passwords / identities.

Website: http://openid.net

Wikipedia: http://en.wikipedia.org/wiki/Openid

52 questions
0
votes
1 answer

GitLab OpenID Connect Provider - User info missing email claim

I have asked this question on the GitLab forum as well: https://forum.gitlab.com/t/openid-connect-user-info-missing-email-claim/21902 I’m not familiar with OAuth or OpenID Connect. I’m having trouble using GitLab as OpenID Connect provider. The…
0
votes
1 answer

Server denied check_authentication after migration of Drupal

I just moved a drupal website from one server to another. On the original server the site was set up directly in apache. On the new server, i have a docker layer in between: The machine runs a debian system with docker, and the (currently only)…
0
votes
1 answer

Lotus Domino as Amazon IAM Identity Provider

I am looking for the way to configure our corporate Lotus Domino server as an Idenity Provider of Amazon IAM service. Amazon supports SAML and OpenID Provider Types. Can I configure Domino server that way? Otherwise, are there other ways to…
Moisei
  • 101
  • 2
0
votes
1 answer

SimpleSAMLphp OpenID Consumer

I'm using SimpleSAMLphp as an OpenID Consumer and no openID provider I tried seems to work. I always get the following error: Exception during login: SimpleSAML_Error_BadRequest: BADREQUEST('%REASON%' => 'Not a valid OpenID:…
Marcel
  • 1
0
votes
1 answer

Have simpleid also provide the identifier

I have a running simpleid installation, and I use my own homepage as the identifier. Now I want to add a user to simpleid who does not have a homepage or similar. Does simpleid provide an identifier for its users automatically somehow? E.g. after…
Joachim Breitner
  • 3,779
  • 3
  • 18
  • 21
0
votes
1 answer

Single sign-on with Chef

I'm getting my personal infrastructure set up (Gitlab, Jenkins, etc.) and I'm planning on using OpenID for single sign-on. I understand that SSO works for Gitlab and Jenkins. Would I be able to configure Chef the same way? If not, would it be…
Ryan Kennedy
  • 203
  • 2
  • 11
0
votes
1 answer

how can you use openID to authenticate different kind of users?

How can you have users authenticate on a web site with different permissions. I would like to have administrator, superuser, collaborators and normal users. In particular, I would like to restrict access to normal users, and only allow the…
azzurroverde
  • 113
  • 1
0
votes
2 answers

Distributed User Authentication

I have an heterogeneous system in my office with different OS and they change rapidly. I was looking for a solution to get authentication in a distributed way like OpenID so I can login machine_A using user@machine_B, is not important to get…
Visik7
  • 13
  • 3
0
votes
0 answers

How can I configure gitlab and nginx as a reverse proxy with SSL authenticating to Azure AD?

I've been pushing on this for days, I'm really hoping some kind soul can help. Nginx is sitting on an Ubuntu machine in Azure. On that same machine, Docker engine is running a Gitlab container (which uses nginx for serving it up.) I've gotten as far…
0
votes
0 answers

Control sudoers using oidc user data

I am implementing a Linux host login using the OpenID Connect PAM module. I use Keycloak as OIDC Identity Provider. Googling, I didn't find a solution to control the sudoers file using OIDC data (like sudoers.ldap does, for example). Are there…
0
votes
0 answers

Can Keycloak/ADFS/RedHat work as an OpenID (not ~ Connect) identity provider?

For a long time I've been wanting to deploy an OpenID IdP of the ones that didn't caught on that you entered and address, i.e; an OpenID, and the service would take you to your IdP SAML-style where you'd authorize it afterwards, the ones that had…
Vita
  • 111
  • 1
  • 1
  • 7
0
votes
1 answer

Windows Authentication with OpenID Connect (OIDC) with Active Directory (AD FS)?

This is NOT about Azure, but about an on-premises offline Microsoft Active Directory system, based on Windows 2016/2019. Our website uses OpenID with Microsoft Active Directory, but we want the user to be logged in automatically (SPNEGO?), when…
Lars D
  • 282
  • 2
  • 16
0
votes
0 answers

Azure AD app registration - possible to modify or transform email claim provided by OIDC SSO?

We have two instances of a SaaS app from a vendor that have SSO capabilities using OIDC. Our app users are differentiated based on the provided email address when logging in using the login page provided by the SaaS app vendor. A subset of our users…
Micah Yeager
  • 121
  • 1
  • 7
0
votes
1 answer

Apache fails when I pass an URL as an argument

Hey everybody, Im really confused about this problem. Ill try to describe it: The problem is: http://mydomain.com/somedir/somephp.php?arg1=value&arg2=http://otherdomain.com&arg3=http://othertoo.com/somepath/something... is totatlly fails. With url…
pinusnegra
0
votes
1 answer

IAP with Google Identity Platform throws "Failed to fetch the discovery document from issuer"

I have activated Identity Aware Proxy on a GCP Load Balancer and configured it to authenticate the users against my OIDC Identity Provider (Auth0) through Google Identity Platform with a default login page hosted on Cloud Run. When I browse my…
MariusPontmercy
  • 677
  • 4
  • 15