Questions tagged [federated-identity]

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

528 questions
2
votes
1 answer

Mapping DynamoDB Item to Cognito User Pool Object

I am doing research on Cognito User Pool, Federated Identities and DynamoDB. In order to achieve fine grained access control, I have to use Cognito Identity Id in my DynamoDB table because anything in user pool cannot be referred in IAM Policy. It…
2
votes
0 answers

Retrieve user profile in Cognito Federated Identities

I'm currently exploring the AWS stack and am therefore building a simple web app. I plan on using: S3 to host the static contents DynamoDB to store user data Lambda + API Gateway for backend logic Cognito Federated Identities to authenticate…
2
votes
1 answer

How to configure ADFS so that it indicates authentication requests should be signed

I'm trying to configure ADFS so that it includes WantAuthnRequestsSigned="true" in its identity provider federation metadata (FederationMetadata/2007-06/FederationMetadata.xml) document? I want to use this attribute to suggest to service providers…
RobSiklos
  • 8,348
  • 5
  • 47
  • 77
2
votes
0 answers

Interaction between Browser, Application, IdentityServer and ADFS during Authentication

I would like to check my understanding of the authentication interaction between a Browser, an Application, IdentityServer and ADFS 3.0 for a federated authentication scenario. I created the sequence diagram below after some googling and reviewing…
2
votes
0 answers

Fedutil Replacement for .Net Framework 4.5

We currently run a Dynamics CRM IFD application and a few .Net Application under IIS7.5 on .Net Framework 3.5 with ADFS 2.0. We are in the process of upgrading our Apps to .Net Framework 4.5.x and to ADFS 3.0. We use VS 2013 now. W.R.T ADFS it was…
2
votes
2 answers

Federated authentication from ASP.NET MVC to SharePoint

The scenario: Our current stack is a SharePoint 2013 web application Users log in to the SP2013 using ADFS claim-based federated authentication: When users click "Log In" in the SP site, they are redirected via ADFS to the identity provider that…
codeape
  • 97,830
  • 24
  • 159
  • 188
2
votes
1 answer

SAML 2.0, Single Logout issue

I have a question regarding SAML 2.0 and SLO. During SLO, as an Idp we're initiating the logout and sending a logout request to SP and SP is sending back a logout response. We're getting a partial logout on the IDP side and the user is getting…
borna
  • 906
  • 3
  • 12
  • 32
2
votes
1 answer

How to show all supported login options in Gitkit when a Gmail address is used to sign up?

I am trying to implement Google Identity Toolkit (Gitkit) based login in my webapp. I have supplied the following sign-in options in the sign-in widget configuration: signInOptions: ["google", "password"]. Now if I enter a Gmail address to sign up,…
2
votes
2 answers

How does the ADFS know that you are logged in?

So we're working to implement SSO. We are using an Active Directory Federation Server to 'tell' our website that a user is logged in via his Windows machine. So the flow is like this 1. http://ourwebsite.com --> redirects to: 2.…
Willem Mulder
  • 12,974
  • 3
  • 37
  • 62
2
votes
1 answer

Implementing identity and access management backed by Stormpath

We are planning to create an identity and access management system for one of our application and using Stormpath made a lot of sense interms of ROI, given that one of the decision is to have the IAM system abstract the Stormpath, so incase required…
Somasundaram Sekar
  • 5,244
  • 6
  • 43
  • 85
2
votes
3 answers

How to force Federated signout redirect to login page?

I'm using WSFederationAuthentication module for authentication. I want this: after user press logout button, he signs out (delete all cookies) and redirect to login page. I have this code for logout button: var ls = new…
Vita1ij
  • 362
  • 5
  • 16
2
votes
1 answer

Thinktecture Identity Server v/s WSO2 Identity Server

Am trying to choose between Thinktecture Identity Server v3 and Wso2 identity server for implementing Identity and Access Management solution. Particularly, am interested in using following features: Single Sign-On (SSO) Managing user…
2
votes
2 answers

An IdP/STS for SaaS providers, where the SaaS customer does his own user management?

(This question is not about programming, but about how to avoid doing any programming. Also, lots of terminology in here-- I'm assuming someone with an answer will already know what they mean.) Background: I'm working on single sign-on in an…
2
votes
0 answers

Windows Identity Foundation - Local STS on Windows Azure

I am trying to use Federated authentication on Azure. I found a example of having a local sts outside azure which is used for authentication from a web role hosted in azure. This works perfectly. My issue is, i dont want to have an application…
joe
  • 589
  • 5
  • 16
2
votes
2 answers

Does it make sense to set up a trusted relationship between Active Directory instances at partner companies?

If a company often requires users to be created in a partner's active directory, and vice versa, does it make sense to set up a federated / trusted relationship between the AD instances? If so, what should be considered? Does the ACL for users in…
Kaiser Advisor
  • 1,446
  • 2
  • 16
  • 26