Questions tagged [federated-identity]

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

The concept of linking a single individual's digital identity across multiple (and usually disparate) IT systems. Federated identity is the larger concept encompassing narrow implementations such as Single-sign on (SSO).

528 questions
3
votes
0 answers

How to prevent a AWS federated user from seeing other federated users resources on AWS console

I have a usecase where in I want to hide resources created by one federated user from other federated users generated on the fly. I am not able to find any documents for this usecase.
prasoon
  • 901
  • 8
  • 25
3
votes
0 answers

aws-amplify signout from federatedSignIn

I am using google federated sign-in with aws-amplify. Sign-In works as expected, but when i use Auth.SignOut(), it throws an exception "Not Authenticated". Is there a different method I should be using to signout from federated sign in ? Or is there…
3
votes
1 answer

Using SAML with JWT for Node API

I'm building an Angular 2 application using SAML2 via the passport-wsfed-saml2 strategy https://github.com/auth0/passport-wsfed-saml2. When I receive a users info back from SAML I generate a JWT token which I use to authenticate a user on an API I…
3
votes
1 answer

Calling SOAP web service with SAML2 token using WCF

I am trying to do the following: Create a SAML2 token in code Using WCF, call web service using SOAP and include the SAML2 token. Using the code below, I try to implement the above. I have a SOAP web service running on localhost:9000, and Fiddler…
codeape
  • 97,830
  • 24
  • 159
  • 188
3
votes
2 answers

Propagate SAML Assertion Response/Security Context to downstream Services/Apps

We have multiple services in our environment. There are scenarios where we want the user to auto-login/silently login to one or more participating services without being challenged by the Identity Provider for credentials or communicating with the…
3
votes
1 answer

How to Pass Okta Assertion to microsoft STS to get the auth token

We are using Okta as IDP for Microsoft Office 365 and a PHP based web application. From PHP we need to do REST API calls to fetch the sharepoint content by using Okta Authentication Token for authentication. So as per the…
3
votes
1 answer

using Thinktecture.IdentityServer3 as a Federation Provider with transforming of claims

Hello I have been trying to work out how I could configure IdentityServer3 to become a multi-tenant federation provider that can transform and enrich claims coming back from say ADSF, Google+, Microsoft Account. Does anyone have any example code of…
3
votes
1 answer

Asp.net MVC/Silverlight and Sharepoint 2010 integration

Just a sidenote: I'm not sure whether I should post this to serverfault as well, because some MOSS admin may have some info for me as well? Additional note 1: I've found this document (Asp.net MVC 2 & Sharepoint integration) if anybody with…
3
votes
0 answers

Any Standard Way to Do Seamless Cross-Domain Authentication With Trusted 3rd Party Web Applications?

Say I run example.com and 3rd-party.com is a trusted partner. Sometimes I want to send my users to 3rd-party.com while letting this website know who the user is (by providing the user's Id), in a way that would not require any user action. Is there…
3
votes
2 answers

SAML and Office 365 Federation

A while back it was announced that Office 365 will support SAML federation Office 365 and SAML and I want to know how I integrate our in house SSO server to work with it? Is active directory necessary for it? All our user data is stored in a…
user2630656
  • 129
  • 2
  • 5
3
votes
0 answers

OWIN - Use Cookie Authentication and Federated Authentication to secure the same website

I have a website where users are either external users who need to provide username/password or internal users in our network (AD). I tried mixing and matching OWIN Cookie Authentication (NuGet Microsoft.Owin.Security.Cookies) and OWIN Federated…
oscarmorasu
  • 901
  • 3
  • 11
  • 28
3
votes
1 answer

How do I move federationConfiguration out of web.config and to some custom config file and load it dynamically by code

I have my configuration in web.config and it works fine. .... How do I move this out…
Birey
  • 1,764
  • 15
  • 20
3
votes
0 answers

GAE Users service returns xml for user nickname property

I have an application that uses the GAE users service and fedarated login. Latetly for one user I get an xml feed in the nickname property. For all the other fields the data is ok In details: My register handler: class…
Jimmy Kane
  • 16,223
  • 11
  • 86
  • 117
3
votes
2 answers

Digest verification failed for Reference

I have implementation of a custom STS. After being authenticated and redirected but before the page was loaded I would receive this error: [CryptographicException: Digest verification failed for Reference…
3
votes
1 answer

JwtSecurityToken exception while decoding Azure Mobile Services JWT token

The following code: using System.IdentityModel.Tokens; JwtSecurityToken jwtSecurityToken = new JwtSecurityToken(rawToken); Generates the following exception: Jwt10113: Unable to decode the 'header' The value "0" is not of type "System.String" and…
Liel
  • 2,407
  • 4
  • 20
  • 39