Questions tagged [federated-identity]

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

528 questions
4
votes
1 answer

Developer authenticated identities federated via an Identity Pool cannot make AppSync calls in Amplify project

Currently, I'm authenticating Linkedin users and calling GetOpenIdTokenForDeveloperIdentity and GetCredentialsForIdentity in a Lambda, and signing in those users with Auth.federatedSignIn(), I am able to retrieve the current authenticated user and…
4
votes
1 answer

What is the Alternative to Federated Authentication in ASP.Net Core?

I have a Web API (.Net 4.6) which authenticates my users using the FederatedAuthentication (System.IdentityModel.Services), and now I am trying to port it to ASP.Net Core 2.2 Web API. Here is my existing code to generate the FedAuth token…
MMH
  • 675
  • 5
  • 18
4
votes
0 answers

How to integrate Facebook & Google login with AWS Cognito for iOS Objective C?

I am integrating AWS Cognito with iOS app(written in Objective C). I want to implement Facebook login and Google+ login with it so that user can login via any of these social providers and get authenticated by AWS Cognito (User Pool/Identity…
4
votes
1 answer

AWS Cognito - Credentials Issue

I am trying to use AWS Cognito to authenticate (using Google) and authorise users, with the intention of assigning IAM roles for the authorised users. I have followed the below steps till now Use the authorization end point to fire up Google…
4
votes
1 answer

send email when user registers - AWS Cognito federated Identities

How can i send an email/trigger a lambda function when a new user registers? Under "edit identity pool" i only found a sync trigger. If i understand correctly: This one is triggered every time a user syncs his data... Is there any way to trigger a…
4
votes
1 answer

Authentication against multiple identity providers using WSFederationAuthenticationModule for asp.net

We have multitenant asp.net MVC web site which supports multiple partners. Currently we are using forms authentication to authenticate users. Now some of the partners have asked for single sign on support with SAML. I did quick POC to test it…
Amey
  • 1,216
  • 18
  • 28
4
votes
2 answers

How to get SecurityToken from ClaimsPrincipal?

How to get SecurityToken from ClaimsPrincipal? I need it because I wanna pass it from an MVC application to a WCF service in AuthenticationManager / Authenticate. In Authenticate method, the value BootstrapContext is null. And even after…
Homam
  • 23,263
  • 32
  • 111
  • 187
4
votes
1 answer

Securing AWS JS SDK Api Calls

I have a website where I use AWS S3 JS sdk to upload/delete images from S3 server buckets. Currently I am passing the credentials in raw format in JS file only, which is not secured. And AWS suggests to use web identity federation technique to make…
Tech
  • 129
  • 1
  • 1
  • 12
4
votes
1 answer

Securing WCF Service Call Between Server Applications with Federated Security

I've got two MVC sites that use the same STS for authentication. I need to create a WCF service as part of one of the sites that allows the other site to retrieve data. These sites could be on different machines accessible over the internet…
4
votes
2 answers

SAML 2.0 assertion response URL for Ping Federate 6.1 service provider

A supplier uses Ping Federate for SAML-based single sign-on. I've got some custom SAML 2.0 code which implements a rudimentary identity provider. I'm doing IDP-initiated SSO with URL and HTTP Post. The PF service provider is at…
Brian Lyttle
  • 14,558
  • 15
  • 68
  • 104
4
votes
2 answers

AJAX call against REST endpoint secured with Thinktecture's IdentityServer STS

I'm having some dramas making a call against a ServiceStack REST service which I've secured with an out of the box IdentityServer STS. I'm making an AJAX call against the REST endpoint, and I'm not sure how one might setup a logon procedure to get a…
Clint
  • 1,159
  • 1
  • 10
  • 19
4
votes
1 answer

Azure ACS with WAAD as IdP gives WS-Federation protocol error if already signed in to another Microsoft account

My relying party application uses Windows Azure ACS for user Authentication. I have ACS configured to use Windows Azure Active Directory (WAAD) as an identity provider. This is working for the most part and users can sign into my application using…
Nathan
  • 1,016
  • 7
  • 16
4
votes
1 answer

Replacement for standalone FedUtil to update system.IdentityModel

i'm looking for a replacement of the Microsoft Federation Utility (FedUtil) from the WIF SDK, which allows me to automatically update (especially) the trustedIssuers list inside a web.config. The old FedUtil could to this with /m /u as…
TGlatzer
  • 5,815
  • 2
  • 25
  • 46
4
votes
1 answer

Why would FederatedAuthentication.WSFederationAuthenticationModule be null in MVC Azure ACS Federated Authentication?

I'm trying to put together FederatedAuthentication with .NET 4.5, MVC 4, and active redirect using a custom server-side login page, using code from this tutorial, and from this code sample. Redirecting to the LogOn method of my AccountController…
Jude Fisher
  • 11,138
  • 7
  • 48
  • 91
4
votes
1 answer

Can multiple users share the same Google Account, or is it against the rules?

Can multiple users share the same Google Account, or is it against the rules? I'm asking, because I would want to ensure that multiple people wouldn't be sharing accounts on my site that is using Federated Login.
ThePiachu
  • 8,695
  • 17
  • 65
  • 94