Questions tagged [federated-identity]

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

528 questions
11
votes
2 answers

Create SAML Authentication request using WIF

It seems most of the WIF information out there is useful for enabling federated authentication across entire applications. I'm interested in using the API to create SAML authentication requests and receive/interpret the SAML responses. I found the…
hackerhasid
  • 11,699
  • 10
  • 42
  • 60
11
votes
1 answer

SAML assertion with username/password - what do the messages really look like?

I need to create a some SAML 2.0 assertions, and I'm having trouble finding what the XML should really look like. Most of the documentation seems to be about using particular tools, not about the messages. I've got the schemas, with a plethora of…
Mike Kantor
  • 1,400
  • 4
  • 24
  • 45
10
votes
4 answers

Can the Apple Id be used by non Apple applications?

Both Google and Facebook can act as Identity Providers in a security federation setup like Ping Identity or Microsoft ACS. Does anyone know if it is possible to add Apple Id as an identity provider?
Frode Stenstrøm
  • 1,048
  • 7
  • 24
10
votes
1 answer

Federated vs. Delegated, OAuth vs OpenID Connect vs SAML

I am trying to understand differences between Federated Authentication and Delegated Authentication, But I am getting more and more confused. Do we use SAML protocol ALWAYS for Federated Authentication? or What? Is it possible to use OpenID Connect…
9
votes
2 answers

SQL Azure Integrated Authentication with a cloud-only Azure Active Directory fails

I have created an Azure tenancy and configured the following: Azure AD with: A simple custom domain name (less than 15 characters). DNS verified etc. All good. Users and Admins groups Users in both groups A VNET and DNS and IP Addresses Enabled…
9
votes
1 answer

API Gateway authentication with Cognito Federated Identities

I want to use Cognito Federated Entity (allowing signin through Google etc), to allow access to API Gateway for a web javascript application. I managed to get the Cognito's sessionToken through signing-in with Google but I'm stuck on the API Gateway…
9
votes
4 answers

forgerock Identity Management Solution Vs WSO2 Identity Server

I'm trying to choose one of forgerock identity management solution (openAM, openIDM) and wso2 identity server for implementing Identity and Access Management solution. I'm interested in using following features: Single Sign-On (SSO) Policy based…
Abdul
  • 694
  • 4
  • 14
  • 29
9
votes
4 answers

WIF- ID1014: The signature is not valid. The data may have been tampered with

I've been using WIF to authenticate our new website, the STS is based upon the starter-sts implementation. To enable this to work correctly on out load balanced environment I've used the following in the global.asax to override the default…
RubbleFord
  • 7,456
  • 9
  • 50
  • 80
8
votes
0 answers

Google Sign In Button -- How to get id_token on server when using redirect flow

I'm adding a "Sign In with Google" federated login button to my site. For desktop I'm using the popup window which works great like this: gapi.auth2.init(); gapi.auth2.getAuthInstance().signIn().then(function(user) { var id_token =…
jpsimons
  • 27,382
  • 3
  • 35
  • 45
8
votes
1 answer

AWS: How to properly authenticate a user against Cognito Pool and use it for Cognito Federated Identity?

I am working on an app which will use two authentication providers: Facebook Cognito User Pool With the former, I have no issues, everything works as intended. However, while setting up the authentication with Cognito User Pools, I am hitting one…
Armin
  • 629
  • 6
  • 23
8
votes
3 answers

WIF manually generate federationmetadata.xml

I am playing with windows identity foundation and I am trying to create an MVC.NET based Security Token Service and use it as the Single Sign On application. My only problem is that I don't know how to generate the federationmetadata.xml file. Is…
Cosmin Onea
  • 2,698
  • 1
  • 24
  • 27
7
votes
2 answers

Difference between WS-Trust, WS-Fed and SAML 1.1/ 2.0 protocols

What's the difference between WS-Trust, WS-Fed and SAML 1.1/ 2.0 protocols? My understanding on these protocols gets confused when SAML is used as a security token in WS-Trust and WS-Fed protocols. Interested in knowing in which scenario these…
Zeigeist
  • 3,755
  • 3
  • 20
  • 22
7
votes
3 answers

Federated identity on Google App Engine

I am successful with the both methods below, to log on using federated log in for my site on Google App Engine (Python) users.create_login_url("\", "google", "https://www.google.com/accounts/o8/id") users.create_login_url("\", "yahoo",…
7
votes
2 answers

Can I create an AWS Cognito user login programmatically?

I would like my app to allow users with a Facebook, Google, Amazon... etc... accounts to be able to login to my app. This works fine through AWS Cognito. However, is there a way for the app to create a user login programmatically if the user does…
7
votes
1 answer

PingFederate IdP-initiated Logout, redirect to TargetResource

Ping Federate Logout From IdP flow as from the Ping Federate Documentation Sequence User initiates a single logout request. The request targets the PingFederate server’s /idp/startSLO.ping endpoint. PingFederate sends a logout request and receives…
Runcorn
  • 5,144
  • 5
  • 34
  • 52
1
2
3
35 36