Questions tagged [federated-identity]

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

528 questions
0
votes
1 answer

Getting an authoritative user id / email in GAE federated login

When performing authentication using the OpenID federated login on GAE, my user object has the following properties: Nickname: http://wordfaire.com/openid?id=103539105724544727060 email: sudhir.j@wordfaire.com From the docs, email() Returns the…
Sudhir Jonathan
  • 16,998
  • 13
  • 66
  • 90
0
votes
1 answer

SSO: Authorized Users Management on Google vs. other IdP

My goal is to implement an SSO Service Provider in my web application, but I'm having trouble understanding SSO with Google as Identity Provider vs. other IdPs. I've created two POCs, one which uses SAML and another one which uses OpenID Connect.…
0
votes
1 answer

Am i missing steps in setting up my AWS account to sucessfully perform GetFederatedToken?

I'm trying to make a button in an app which automatically logs the user into the AWS console in a browser. When the user clicks the button, it should prepare a token and compose a URL and then open that URL in a new window which causes the login to…
0
votes
1 answer

Azure B2C Guest (External Azure Active Directory) X Member (Federated Azure Active Directory)

I implemented what's described in this doc: Set up sign-in for multi-tenant Azure Active Directory using custom policies in Azure Active Directory B2C It's related to this answer on SO. Can we get a Guest (External Azure Active Directory) instead of…
Leniel Maccaferri
  • 100,159
  • 46
  • 371
  • 480
0
votes
1 answer

Terraform with openstack federated users on CLI

I set up a federated identity on openstack and i can connect my Ldap users on horizon and with CLI with openidc. in my adminrc file for federated users, i use specific parameters:…
0
votes
0 answers

What are the best practices for authorization of REST API with federated security?

With federated security (e.g. OIDC + external identity provider) the owner of the REST API has no control over the user profile, so the owner of the API cannot store any application-specific information (such as user role or claim) in the user…
isobretatel
  • 3,812
  • 7
  • 34
  • 49
0
votes
2 answers

Siteminder alternatives

We are going to be setting up a new environment and SiteMinder has been suggested to help with web app authentication/authorization for both internal users and federated users. However, we have not had good experiences with Siteminder and would…
0
votes
1 answer

Add user to AWS Identity Pool automatically after login through Google Federated Identity into User Pool?

I am building a web app that hosts authentication security using AWS Cognito. I am having the users sign in through a google login page, which then adds that instance of login automatically to a configured AWS User Pool. I am doing this through this…
0
votes
0 answers

Automatically add authenticated google user to cognito user pool through aws-amplify in angular?

I am using AWS Cognito to authenticate my site's users through a Google Federated Identity. Everything seems to be working correctly, the correct tokens are returned (as far as I can tell), and the user seems to be authenticated. However, I cannot…
0
votes
1 answer

If using multiple UserPool's "App clients", do I need to add them all to IdentityPool's "Authentication providers"?

I'm writing a web app which is using AWS Cognito UserPools for user authentication and IdentityPools for granting direct access to an S3 bucket. This JavaScript web app has its own App client ID in the UserPool with which it interacts with it. I…
0
votes
1 answer

How to attach Facebook account to AWS Cognito User

I have a set of users in a Cognito User Pool. These users, and ONLY these users, are allowed to login to my webapp. Now I want to allow these users, and ONLY these users, to have the option to login either via Facebook or via their login…
Marc
  • 3,386
  • 8
  • 44
  • 68
0
votes
1 answer

AWS access keys and federation

If an application runs in a corporate Data center (i.e. outside of AWS environment) and uses corporate credentials from its on premise Microsoft Active Directory as the sign in mechanism, would that application be able to federate into AWS…
0
votes
1 answer

How do I extract the signing certificate in ACS for WCF?

Due to a bug in either FedUtil, or ACSLabs, I am adapting this WCF AppFabric labs sample to use the default signing certificate of ACS instead of a custom one. Question: How do I extract the signing cert used in the ACS Labs for use within WCF?
makerofthings7
  • 60,103
  • 53
  • 215
  • 448
0
votes
1 answer

Integrating custom authentication service with AWS Cognito

I have an authentication service currently integrated with CA layer 7 API Gateway. When user presents username/password to L7, it forwards the call to the auth-service, which returns JWT and session id if credentials are valid. I am looking to…
0
votes
1 answer

AWS Custom Federation Broker: calling federation endpoint error 400 python

I'm trying to creating a URL that enables federated users to access the AWS Management Console following the [officlal documentation][1]. I'm using Cognito with [enhanced authflow][2] in order to authenticate user with username and password. This…