Questions tagged [federated-identity]

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

528 questions
0
votes
1 answer

Google One-Tap-Login - "No credentials avaliable" error

I am trying to follow the simplest of examples of how to setup up Google's " One tap sign-up and automatic sign-in" in a web page. Just copy and pasting the code provided by google, I get an exception "No credentials available". Why? How to fix…
0
votes
1 answer

APIG + federated identities - fine grained access control?

I'm looking for the best way to control the access to different parts of my API. The api is being called via federated identities which get temporary credentials (STS) that map to a specific IAM role. This ensures that only logged in users can call…
0
votes
1 answer

Can an azure active directory domain be federated with an openid connect IdP like identityserver and does this support Azure AD Join

We currently have a solution where azure ad domains are federated with our ADFS server. This solution uses the WS-Trust and WS-fed protocols. Ws-fed is used for the passive auth flow in the browser, WS-Trust (the usernamemixed endpoint) is used for…
0
votes
0 answers

Not able to create user from Identity provider in user pool cognito in Ionic 3

I have implemented 'Login with Google' in android hybrid app with the federated identities which is working fine and I am receiving accessKeyId, secretAccessKey, sessionToken. But what I want is, when the user logged in with google, the new user…
0
votes
1 answer

AWS Federation Identity with LDAP

I managed to integrate logging into EC2 linux and windows based on integration to Simple AD LDAP. What I am looking at now, is there possible to authorize users based on AD Groups. Let's imagine we have user John who is in Developers Group. I would…
Michal Grzelak
  • 191
  • 5
  • 15
0
votes
0 answers

iOS Facebook sign in with AWS Federated Identities issues

I am using AWS Cognito Federated ID with my iOS app for social providers (Facebook, Google). After sign in with Facebook, user is getting error 'Token is not from a supported provider of this identity pool'. If I allow unauthenticated ids in Fed…
0
votes
1 answer

Cognito social auth should result in a session token

My backend expects the cognito session token that is result of user logging in with cognito user pool. However, when user authenticates with facebook, no session token is being returned. Is there a way, to have the social authentication result in a…
0
votes
0 answers

Can Single Sign-on be achieved between two applications secured by different STSs using OpenID Connect with Federation

I have a web application secured by IdentityServer using OpenID Connect. It is to be launched from Microsoft CRM and I would like to know whether SSO can be achieved by federating IdentityServer to the Azure AD that secures CRM? Specifically, I…
0
votes
1 answer

An error occurred (ResourceNotFoundException) when calling the ListIdentities operation: IdentityPool 'ap-southeast-2:x' not found

I'm trying to get a list of users in AWS running the command: aws cognito-identity list-identities --max-results 60 --identity-pool-id ap-southeast-2:xxxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx Where 'ap-southeast-2:xxxxxxxxxx' is found in AWS…
meds
  • 21,699
  • 37
  • 163
  • 314
0
votes
1 answer

Running FedUtil.exe silently

Is it possible to run FedUtil.exe silently on RP machine in order to establish a trust with an STS? instead of using the UI FedUtil screenshot: https://i.stack.imgur.com/wzo7E.jpg
0
votes
1 answer

Federating user access to AWS Console/CLI

My company has a Active Directory on Premise and we want to federate employees into AWS console/CLI by authenticating against it. There are multiple ways of doing this over VPN or direct connect and I have came across two of them 1) using ADFS and…
0
votes
1 answer

Cognito: Get federated identity email

When using cognito, (not just user pool, but Google and FB federated identites too) how can I get the users email address? Do I have to make a separate call to the federated identity provider? If so could you provide an example that won't prompt…
Reid
  • 4,376
  • 11
  • 43
  • 75
0
votes
0 answers

Issue AWS mobile hub sign-in - NotAuthorizedException for identity pool

I am referring to AWS Mobile Hub Developer Guide (for integrating email-based user sign-in) http://docs.aws.amazon.com/mobile-hub/latest/developerguide/amhd-dg.pdf Topic titled : Setup your app for AWS Mobile services (Android - Java) Last step no 8…
0
votes
1 answer

CloudFoundry UAA Multi instances

What’s the recommended setup across CloudFoundry foundations for UAA? When clients can get routed between the foundations how are clients ensured they don't get re-authenticate? More specifically: If an access/id token is generated in one foundation…
0
votes
1 answer

Implementing SSO with Simple SAML in an Old .NET 4.0 MVC Application

I need to incorporate Single Sign-on in an existing MVC application. It's a bit long in the tooth now, with only .NET 4.0 libraries. So, a lot of that nice ClaimsAuthorizationManager/passive redirect stuff in 4.5 is not available to me. Can anyone…
onefootswill
  • 3,707
  • 6
  • 47
  • 101