Questions tagged [single-sign-on]

Single Sign On is a technology that allows a single login to be transparently used with multiple applications and environments.

Single Sign On (SSO) is a technology that allows the transparent use of a single username and password in multiple security domains. They're commonly used as part of a greater framework which unites otherwise separate systems into a single virtual login domain. SSO systems may be purely web-based, or client-based.

A variety of technologies can be used to build SSO systems.

347 questions
1
vote
0 answers

Kerberos with HTTP Resource Server Login

I am having an http (IIS) resource server which uses Kerberos 5 for authentication. Every time I reach the page I need to key in my username and password but if I have done kinit in my machine (Windows 10) and have configured my browser (Firefox)…
1
vote
0 answers

Kerberos on NameBased vhosts with SSL

Im trying to figure out how to implement kerberos for SSO on sites that are using name based vhosts on apache ( linux server) e.g. Lets say that I have domains a.com and b.com. Both are set as CNAME of the domain c.com in DNS (Trying to save…
1
vote
1 answer

How can I achieve SSO to Windows RDS Services using Google Identity / GSuite?

My org is almost exclusively Linux and Mac based. We have all of our internal services configured to use our GSuite logins for identity and auth. Now we need to use a Windows application, and I'd like to host it in GCP using Windows Server 2019…
1
vote
1 answer

Gitlab + Azure AD + LDAP

I have gitlab (ee) setup with terraform to run in a k8s cluster on azure. This all works fine and dandy, but what I would love to do is use LDAPS to sync user and group permissions with Azure AD, so I can use it as shown here:…
SeeDoubleYou
  • 271
  • 1
  • 2
  • 4
1
vote
2 answers

Federated SSO to AWS using CLI

We have successfully setup an external idP using google and connected it to AWS. Our users now have Federated SSO with AWS and can easily log into the web console with SAML 2.0 federation Role we created. This role also allows programmatic access…
1
vote
0 answers

How to move from a physical AD network towards a hybrid Azure network

I'm just looking for some guidance here. Maybe a, "Hey, check out this link/book/video that shows how to get started with Azure" Everything I've found on the web is either too specific or too general to be of much help. We currently have a local AD…
DLorien
  • 11
  • 4
1
vote
0 answers

HTTPS to HTTP SAML SSO using mod_auth_mellon

I have a simple HTTPS to HTTP reverse proxy using Apache HTTPD (CentOS) I have enabled mod_auth_mellon for SAML SSO, it works fine if I have a simple http proxy without any virtual host. When I enable HTTPS & Virtual host, mellon auth is not…
1
vote
1 answer

nginx proxy server setting request url for subsequent request

server { server_name 127.0.0.1; listen 3000; location = /auth { internal; proxy_pass http://127.0.0.1:8088/auth; } location / { auth_request /auth; # force Nginx to preserver the response…
Jason Liu
  • 11
  • 4
1
vote
1 answer

Shibboleth return url does not work over subdirectory?

We are trying to install Shibboleth for the first time and we got everything working perfectly when applying single sign for a website over a top level domain, but not under a sub directory. Here is our Apache virtual host config file which works…
John
  • 7,343
  • 23
  • 63
  • 87
1
vote
1 answer

customise saml attributes Azure AD

I have configured SAML SSO against a new app in my Azure Console. I have proven it authenticates using simplesamlPHP. I am trying to add/adjust the attributes that are passed back with the SAML token. Test App in Azure Active Directory…
1
vote
1 answer

Where are 'DeviceContext' claims when using alternate browser in ADFS 4.0?

I know this is probably not the best place to ask this question. But, after days of working on this, and having posted in the Microsoft Forum, I'm at my wits end. We are utilizing a hybrid ADFS 4.0 (Server 2016) / Azure AD / Office 365 setup with…
1
vote
1 answer

Single Sign On (SSO) with Xgrid, without OS X Server (10.6.x)?

I've been playing with Apple's Xgrid a bit lately and was hoping to find a means of using multiple agents, running tasks as an authenticated user, without having to run OS X Server on the controller. The only way to do this is via the single-sign-on…
ives
  • 226
  • 1
  • 7
1
vote
1 answer

Publishing of Windows 2016 Server RemoteApp and automatic delivery of icons to the Start Menu doens't work

I'm trying to setup a lab with a VM hosting all the roles for Windows 2016 Server Remote Desktop Services (CB, SH, WA) to publish few apps to be delivered to Windows 10 Professional Clients. All machines are joined to a domain. There is an Active…
1
vote
0 answers

Wordpress SSO without using 3rd party plugins on Azure, is it possible?

I'm setting up a Wordpress installation on Azure which is using an external ADFS provider for single sign-on. Up to now, the Wordpress installation was self-hosted and used the miniOrange wordpress SSO plugin to provide single sign-on. If possible,…
Arahman
  • 111
  • 1
1
vote
0 answers

Enabling AAD federated SSO for Google compute engine app

I have a Webapp hosted on Google compute engine. I am trying to list it on Microsoft AppSource. One of the mandatory conditions for listing is enabling of Azure Active Directory federated Single Sign-on (AAD federated SSO) in the app. Google Cloud…