Questions tagged [idp]

Identity Provider (IDP)

IDP on wikipedia

342 questions
4
votes
2 answers

Implementing RBAC using okta

Currently our spring boot app uses okta for login. There is a need to implement RBAC for the application so I was trying to see if I can leverage okta itself for mapping users to specific roles. I would like to implement the standard RBAC model in…
Sunny
  • 105
  • 7
4
votes
1 answer

Setting up a new Shibboleth IdP to work with an existing SAML SP

Hopefully this isn't a duplicate or too broad. I just have a feeling I need a bit more information than anything else I've been able to find. I have a program/server that already has a functioning SAML SP built in to it. I'm trying to get it…
addMitt
  • 951
  • 2
  • 13
  • 27
3
votes
1 answer

How to export User & their credential from Okta

I am not able to find a way to get the user credentials from the okta which will be in the hash format. No API is available to make export for the credentials. To export a user I got the solution from this chrome extension (…
3
votes
1 answer

Keycloak as a Service Provider - setting up a signing certificate

How do I install a signing certificate in Keycloak when using Keycloak as a Service Provider (SP) that should connect to a (non-Keycloak) Identity Provider (IdP)? To be more precise, Keycloak should be used as an Identity Broker (as described in the…
Andreas
  • 93
  • 1
  • 8
3
votes
1 answer

Is it possible for Keycloak to be used as an IDP and a PHP application as an SP?

I imported this PHP project into Eclipse (master branch; the contents of the demo1 folder). Goal: I want to integrate a login SSO demo in PHP using Keycloak with SAML. First of all, is it possible for Keycloak to be used as an Identity Provider…
user14016240
3
votes
1 answer

How does .net core web api jwtbearer middleware verify OpenID Connect token with authentication provider

I have been banging my head against the wall for a few days now. The solution is probably too simple to state in blogs so I ask the question here. I am developing a .NET Core Web API which should delegate all authentication and authorization to a…
3
votes
1 answer

How to disable the SSO feature in the Keycloak

I want to use Keycloak as an identity provider in our company. I have defined one Realm with three clients (I have three applications and I have defined a client for each application) I want to separate the process of login and logout for each…
M-E
  • 168
  • 4
  • 19
3
votes
2 answers

Building a SAML IDP

We are planning to build our own SAML IDP. I have a few questions: Does it make sense to build one? If yes, what's the approach? I don't see any Java libraries for SAML. Can't use spring-security-saml as that has support for integrating third party…
Praveen Kamath
  • 959
  • 2
  • 10
  • 18
3
votes
3 answers

Keycloak: Invalid SAML Response by External IdP

I am implementing a SSO option using SAML with an external IdP. If I inspect received SAML response after I click on the SSO button in the browser, I can see the authentication data that I need (such as the name of the user and the email), so the…
user3612623
  • 245
  • 3
  • 13
3
votes
1 answer

AWS Cognito pass additional parameters to OIDC IDP

I'm using AWS Cognito for my SSO and added a federated IDP (pingfederate). Cognito does not have any option to add additional query parameters that I want for ping federate (acr_values and prompt). There's no documentation around this in AWS as…
3
votes
1 answer

Unable to create SAML response from IDP

I have to create a Single Sign-On (SSO) for Salesforce. For authorization, I will be using user's mobile number with OTP. I have to only create a SAML response using Go once the OTP is verified. I can see that there are a couple of libraries for…
Rahul Satal
  • 2,107
  • 3
  • 32
  • 53
3
votes
0 answers

How to Log Out from Keycloak from Django Code

Can not log out from keycloak IDP from inside of Django app code. All stackoverflow answers did not work fo me (most are for older version of the components involved), the same goes for the keycloak documentation. Recently we have implemented…
SwissNavy
  • 619
  • 1
  • 12
  • 28
3
votes
2 answers

Handle the Identity provider side of SAML using Node.js

I need to implement an Identity provider service (using node.js) that should be able to. Get, validate and parse (using private key and cretificate) the authentication request from SP example If everything is valid, respond with a signed XML…
k-lusine
  • 397
  • 4
  • 11
3
votes
1 answer

How can I pre-fill email for SAML Google IDP?

We're using SAML 2.0 for SSO, and want to improve the UX by allowing a user to enter their email only once (to identify they need SSO). Is it possible to pre-fill the SAML SSO email field when authenticating with Google's SAML IDP? I know that the…
abyssnolf
  • 33
  • 3
3
votes
3 answers

Google Apps the iDP via SAML for Office 365

I have a client who is an NPO, so they get GSuite for NGO's and Office 365 E1 for free. They would love to remain with Gsuite and use certain Office 365 features such as OneDrive. Spent a week trying to get it right, I have been following all the…
1
2
3
22 23