Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [saml]

SAML (Security Assertion Markup Language) is an open standard and XML-based markup language for exchanging authentication and authorization information between parties, known as service providers and identity providers.

100 questions
1
vote
0 answers

SAML Azure mappings

I'm trying to setup SocialCast to use SSO against Azure AD. I have everything working except I'm unable to map the fields for first name, last name, and email address. I know authentication is working because the logs on Azure confirm it, but I…
Carl
  • 373
  • 2
  • 12
1
vote
0 answers

Reconfiguring MFA for SAML account

We use Office 365 SAML for authentication with NewRelic. I recently factory reset my phone and now don't have my Microsoft Authenticator account. I am trying to figure out how to set this up again but am unable to locate the feature anywhere in…
Miles Hayler
  • 173
  • 9
1
vote
1 answer

Why do I get "InvalidNameIdPolicyException: MSIS7070" when authenticating via ADFS?

I am trying to set up ADFS authentication (Server 2012) to a Bomgar appliance. Both ADFS and Bomgar are running in VMware Workstation virtual machines. ADFS is acting as the IdP (located at https://wodan-kaveh.ingi.local), and Bomgar is the Relying…
David Dietrich
  • 13
  • 1
  • 1
  • 3
1
vote
2 answers

LDAP connector for SAML

I'm looking for a SAML-LDAP bridge. I am trying to get company macs to authenticate against Centrify Cloud (no AD, we don't plan on implementing it). I can federate access to Centrify Identity Service using SAML, but Macs can only connect to LDAP…
Adam Machnikowski
  • 21
  • 2
1
vote
1 answer

SAML authentication fails with error MSIS7075

Windows Server 2012 R2 ADFS relying party: RPIdentifier SAML Endpoints: https://myhost.domain/adfs/ls and https://10.2.0.225/saml bound to POST Encryption: The self-signed certificate used for ADFS is imported in the IIS Manager and is used by the…
Bemipefe
  • 115
  • 1
  • 11
1
vote
1 answer

Skipping unmapped SAML 2.0 attribute, even though name and nameFormat match

SP running Shibboleth 2.5.6. For one particular IdP, I have these attribute mappings:
bishop
  • 1,086
  • 10
  • 16
1
vote
1 answer

How to get Subject from client certificate issued as a claim in ADFS?

I'm using Certificate Based Authentication in ADFS 3.0 and need to get the Subject field from the client certificate issued as a claim, but it's not available as an incoming claim to ADFS. When I enable auditing I can see that it's present in the…
Amethi
  • 123
  • 6
1
vote
3 answers

Splunk SAML SSO from an IdP with Apache mod_mellon fails

I am trying to configure SSO from an IdP to Apache with mod_mellon and mod proxy to splunk. Environment: Ubuntu 14.04; Apache 2.4.7; mod-auth-mellon 0.7.0. Apache configured with the mellon-generated key / cert on default ssl site. mod proxy is…
Brett
  • 221
  • 3
  • 11
1
vote
0 answers

Implement SSO between a custom app and Microsoft 365 with custom identity provider

I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn't ask for credentials. Context: ADFS is owned by corp global IT team and changing…
Eduard Paul Lakida
  • 11
  • 2
1
vote
1 answer

How can I authenticate workstation on Azure ID when tenant uses SAML to Google?

I have some clients using Google SALM (https://support.google.com/a/answer/6363817?hl=en) on Microsoft O365, when a user need access to Office 365 tools and use your corporate e-mail account, Microsoft redirects the auth screen to Google to complete…
Ivan Carlos
  • 21
  • 3
1
vote
0 answers

Wildfly Elytron container managed authentication with federated SAML2 IDP

I'm trying to set up container-managed authentication with Wildfly 24 and would like to use an existing (federated) Shibboleth IDP. I haven't found docs detailing that use case, so I opted for the proxy auth scenario, e.g. Apache + Shibboleth SP…
fuero
  • 9,591
  • 1
  • 35
  • 40
1
vote
0 answers

Why don't identity providers have separate IDs and Names in Openstack?

I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other objects like this? Is there a rule why specific…
Zoli
  • 11
  • 2
1
vote
0 answers

Why isn't Kerberos used for SSO to cloud apps?

When comparing Kerberos to SAML, a common argument on StackOverflow sites and the rest of Internet is that SAML is for Internet / cloud applications while Kerberos is for enterprise LAN. There are several claims to support such an…
Ryan
  • 187
  • 1
  • 1
  • 8
1
vote
0 answers

Integrating GitHub Org with SAML shibboleth & post actions

I am at the beginner level of GitHub cloud administration and looking for answers to the below-listed questions after I enable SAML integration (Shibboleth) for my Github cloud Organisation. Before enabling IDP integration with shibboleth idp on…
rgh
  • 11
  • 3
1
vote
0 answers

Windows ADFS User Certificate URL

I have setup a window lab server based on windows server 2012 r2. I have an AD, ADFS and CS. I have setup User certificate enrollment. Everything work fine but I have a litle issue. I have setup ADFS SAML2 authentication and some of my server use it…
Jonathan COLLIN
  • 11
  • 2
1 2
3
4 5 6 7