Questions tagged [federated-identity]

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

528 questions
5
votes
2 answers

Federated Identity Management: ADFS vs OpenID

I'm new to Federated Identity Management. I'm trying to understand the differences between the authentication protocols and concepts. I understood the difference/relationship between OpenID and OAuth. However, I'm still confused about the…
user2931442
  • 373
  • 2
  • 7
  • 16
5
votes
1 answer

Creating an OpenID Connect server

I have built an authentication system and would like to make it a federated authentication and authorization system (SSO), like Google+ or Facebook. Upon researching, I discovered that OpenID Connect on top of OAuth 2.0 is the best bet. I think it…
5
votes
2 answers

Creating a local Token cache using the Geneva Framework

Haven't seen many Geneva related questions yet, I have posted this question in the Geneva Forum as well... I'm working on a scenario where we have a win forms app with a wide installbase, which will be issuing frequent calls to various services…
Yossi Dahan
  • 5,389
  • 2
  • 28
  • 50
5
votes
3 answers

Spring SAML extension for multiple IDP'S

we are planning to use spring saml extension as SP into our application. But the requirement with our application is we need to communicate with more than 1 IDP's Could any one please provide me/direct me to the example where it uses multiple…
5
votes
3 answers

Unable to authenticate to SharePoint Online programmatically with federated services

I am unable to authenticate to SharePoint Online using SharePointOnlineCredentials, receiving the error message: Identity Client Runtime Library (IDCRL) encountered an error while talking to the partner STS. This same code worked until we…
Brite Shiny
  • 121
  • 1
  • 1
  • 6
5
votes
1 answer

Restricting access to Amazon S3 on object level for federated IAM users

I'm doing some research around using S3. What I would like to achieve is basically control access to objects in S3 bucket in the same manner like on file system but for IAM federated users. Let's assume following scenario Bucket |- File…
Midi
  • 459
  • 1
  • 5
  • 19
5
votes
2 answers

Sharing IClaimsPrincipal/FedAuth Cookie between servers/apps ID1006

I have an ASP.NET app that uses Azure ACS (and indirectly ADFS) for Authentication - which all works fine. Now I've been asked to pass the SessionToken to another backend service where it can be verified and the claims extracted. [Long Story and…
James
  • 61
  • 3
4
votes
0 answers

Google single-sign-on solution

Google has a funky solution for delivering SSO across all its sites. It seems to manage multiple accounts really well, allows for account linkage, allows the user to select from multiple accounts when trying to access a service etc. etc. Is there…
4
votes
2 answers

Custom STS & Azure ACS error ACS50008: Invalid SAML token

I have a custom STS implementation. Currently it is configured as an additional identity provider on Azure ACS. I have a relying party website that is authenticating successfully via ACS (Windows Live, Google, etc). However, whenever I try to login…
cleftheris
  • 4,626
  • 38
  • 55
4
votes
0 answers

Chrome extension using AWS Amplify federated sign-in

I'm trying to implement a chrome extension based on React using AWS Amplify federated sign-in. I already found this tutorial which works well as long I use the standard authentication from AWS Cognito. But when I try to implement the federated…
4
votes
1 answer

AccessDeniedException while trying to do dynamodb:PutItem action

My AWS Lambda function is trying to write to dynamodb. Users who log in from client app call the AWS API-Gateway endpoint that further calls the AWS Lambda function. These Users are created in AWS Cognito User pool. Login is done using Identity Pool…
4
votes
0 answers

How to sign out of an AWS Cognito federated identity session?

It is easy to sign into an AWS Cognito session either via username and password or federated identity using { Auth } from 'aws-amplify' by Auth.signIn({ username: email, password: password}) or Auth.federatedSignIn({ provider: 'Google' }); // or…
Shep Sims
  • 698
  • 9
  • 27
4
votes
2 answers

Large FedAuth Cookie (FedAuth4) with only 7 claims

I'm struggling to figure out why a ClaimsPrincipal with only 7 claims is producing 5 FedAuth Cookies (FedAuth1, FedAuth2, FedAuth3, FedAuth4) from the FAM. This is causing problems as Safari is truncating my cookies and my mac users are unable to…
Jonathon Kresner
  • 2,793
  • 5
  • 29
  • 40
4
votes
1 answer

AWS Cognito - Federation Identity Provider login page directly (without cognito login page)

I am using AWS Cognito User pool with Office 365 (azure AD) & Google federation identity providers configured. When I integrated my user pool with my angular application for the user authentication, I am seeing a cognito login page where I can sign…
Buddha
  • 185
  • 1
  • 15
4
votes
1 answer

Update Cognito user pool attributes by SAML identity provider

I have a Cognito User Pool and have created a SAML Identity Provider, which is mapped to a client app. I have created a mutable custom attribute and mapped this attribute with SAML Response assertion. For the first time, when an user logs in with…
Indranil
  • 1,776
  • 1
  • 17
  • 22