Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Single Sign On (SSO) is a technology that allows the transparent use of a single username and password in multiple security domains. They're commonly used as part of a greater framework which unites otherwise separate systems into a single virtual login domain. SSO systems may be purely web-based, or client-based.

A variety of technologies can be used to build SSO systems.

347 questions
1
vote
2 answers

Connect Azure Active Directory to on premise customer AD

We have a web application running in Windows Azure where a variety of customers can log in. Lately more and more of them have been asking for some sort of single sign on solution, or at least a synchronization of their local/domain users with the…
Alex
  • 11
  • 1
1
vote
0 answers

SSO Linux and AD Trusted Domain

Having successfully built a one-way trust between 2 AD domains, we can't lookup/id the user in the trusted domain. Here's our use case. AD1: dom1.com (Win2k8 R2) - One-way outgoing trust to AD2 AD2: dom2.com (Win2kr R2) - One-way incoming trust…
donc
  • 19
  • 3
1
vote
1 answer

Office 365 SSO presenting two signon boxes when using ADFS Proxies

I have the following setup- we use an external, third-party load balancer to forward traffic to one of our two ADFS Proxies (in the DMZ) which in turn forward to one of our two ADFS servers. Internally, SSO works if we point directly to the ADFS…
1
vote
1 answer

SSO while still allowing offline use?

I am thinking of implementing Single Sign-On for a whole company. PROBLEM: Some employees of that company need to be able to work offline, without having to switch user/environment. Is there any trick to make both compatible? While normally using…
Nicolas Raoul
  • 1,334
  • 7
  • 22
  • 43
1
vote
1 answer

php REMOTE_USER variable

I am trying to setup mediawiki with SSO. I was able to set up authentification with domain, but I cannot setup SSO. For some reason, $_SERVER['REMOTE_USER'] variable is not set. I looked into some anwsers in SO, but has no luck solving my issue. I…
erizo
  • 157
  • 1
  • 6
1
vote
0 answers

ADFS 3.0 SSO Form authentication Issue - Subdomain not found under certain circumstances

Let me preface that I'm not near the server at the moment so I cannot give a direct readout of any error messages. We have implemented an ADFS 3.0 Server and are using Microsoft's included SSO webpage. We are having a problem with the the UPNs of…
CG Nobles
  • 11
  • 3
1
vote
1 answer

What is wrong with my SAML Response? (Office365 SSO)

I have been trying to federate an Office365 domain for some time now with no luck. I have gotten to the point in which I receive a request and am able to generate a response based off that, but don't know if the response it correct. I am getting…
1
vote
2 answers

Single Sign on for Virtual Machine

Does anyone know if it is possible for a Windows Virtual Machine on a Windows host to take advantage of Single Sign on? The objective is to only have to login once to the host machine and for the guest to automatically login against AD with this…
user2284355
  • 455
  • 2
  • 10
  • 24
1
vote
0 answers

JBoss SPNEGO Authentication Renewing Server Kerberos Tickets

We have successfully configured SPNEGO with our webapp on JBoss EAP 6.2, Windows Server 2008, and IE10 using JBoss Negotiation. What is best operational practice for renewing the ticket issued to JBoss to minimize Administrator intervention? The…
praspa
  • 111
  • 3
1
vote
2 answers

What does "Assigned" mean in the Azure AD Application user list?

Within the Azure portal, inside an Active Tenant I have an application with users listed, of which are created in the tenant. What does the term Assigned mean? I incorrectly assumed that it meant the user existed in the Azure tenant, but could not…
1
vote
2 answers

"User with an existing Microsoft account" cannot access app using Azure AD SSO

Yesterday I followed Vittorio Bertocci's tutorial "WS-Federation in Microsoft OWIN Components – a quick start" to set up a test application using Azure AD authentication. This is my first use of Azure AD (I work alone so don't use AD, period). I…
EvilDr
  • 164
  • 1
  • 2
  • 16
1
vote
0 answers

Partial content 206 requests on nginx behind WebAuth

I'm having a troubleshooting an issue that I think is likely due to WebAuth authentication when serving .webm videos. The server I have is nginx 1.6.2. I can make 200 GET requests just fine. I also have two parallel configurations - TLS 1.2 (open)…
ranvel
  • 111
  • 2
1
vote
1 answer

2K12 R2 ADFS 3 - IE Pass Through Authentication Fails on 2nd Login with 400

We have a customer who recently deployed ADFS 3.0 on Server 2K12 R2 as an IDP for our SaaS product (We are the SP and we use SimpleSAMLPHP). This customer is our first ADFS 3.0 customer, but we have many happy 2.0 customers. This customer uses…
jriffel73
  • 11
  • 4
1
vote
2 answers

ADFS Metadata with Active Directory Attributes

Using ADFS on Windows 2012 R2. I have created a Relaying Party Trust that has a claim rule defined that maps a Active Directory Attribute to a named attribute in the vendors system. When I view the federationmetadata.xml file I notice that these…
ServerMonkey
  • 257
  • 4
  • 13
1
vote
0 answers

vSphere 5.1 SSO upgrade issue

I´m having issues upgrading VMware vSphere Infrastructure from 5.1.0.1123961 to 5.1.1474365. First I ran into the issue described in the VMware KB 2046318 (Installing vCenter Single Sign-On fails with Error 20003 (2046318)). To summarize the issue,…
Rene
  • 93
  • 1
  • 4