Questions tagged [idp]

Identity Provider (IDP)

IDP on wikipedia

342 questions
3
votes
2 answers

Keycloak bulk user import

Does anyone have any thoughts on how one might import a very large number of users into Keycloak. We are in the process of upgrading from 2.5.5 to 4.0.0 and have had to switch from MongoDB to MySQL. We have been able to export our user base but with…
Chris Latta
  • 31
  • 1
  • 1
  • 3
2
votes
0 answers

User attributes for OIDC standard claims using Keycloak

I am using Keycloak as an identity provider for an application. The users can create an account directly via Keycloak and the users are required fill some personal information that maps to OIDC standard claims when registering. I added the…
DurandA
  • 1,095
  • 1
  • 17
  • 35
2
votes
1 answer

Token exchange grant support in AWS Cognito

I am working on a cloud native microservices based application deployed in AWS. This application should use a OIDC based IdP (preferably AWS Cognito). The authentication and authorization flow are as follows. Once the user logs in using…
2
votes
0 answers

How can I tell a password manager which username/password to autofill with?

Question How can a webform tell the browser which username and password are appropriate inputs when autofilling if there are multiple entries for the same (primary) domain? Context I design an authentication system that offers multiple identity…
Merchako
  • 789
  • 1
  • 8
  • 19
2
votes
1 answer

Keycloak IdP Post Login Flow - Roles Condition failure

I'm trying to set up Keycloak to restrict access to clients depending on their roles. Since the users authenticate against AAD, I'd like to use the "Post Login Flow" configured in Identitity Provider settings. Fortunately, for the moment we want to…
Michael F
  • 43
  • 2
2
votes
0 answers

Keycloak IDP forwarded auth does not redirect to front-channel logout URL

Situation For my web application, I have set up a keycloak (v18.0.0) realm with an external SAML IDP. After successfully logging in, the application is using its own cookies (I can't change this since this is an external piece of software) and has a…
Theo
  • 2,262
  • 3
  • 23
  • 49
2
votes
0 answers

Identity Broker vs. Federation Gateway

I am trying to understand differences between Identity Broker and Federation Gateway and where and when should you use these two services. Thanks for all kind of advice.
2
votes
0 answers

How to select and work with a particular Provider (OIDC provider) added on Google Could - Identity platform by using server side java code

I have added these 2 identity providers (refer attached images) to Google Cloud -->Identity Platform Email/Password OIDC Connect (oidc provider) Now if you see there is a User section as well under Identity Platform So I have added some random…
2
votes
2 answers

What scope does "idp" belong to in IdentityServer4?

My MVC client's access token contains an "idp" claim that my simple server-to-server client's token doesn't. I don't explicitly request idp on either clients, so where is this claim coming from? I thought it was part of "openid", and since it is…
Alexu
  • 1,015
  • 2
  • 12
  • 32
2
votes
0 answers

Identity Server Resource Owner flow with external Identity Provider

We have a project where the client requests the use of their own Identity Provider, in this case, it is SalesForce. We secure the application using IdentityServer 3 and have configured it that for this client (based on parameters) it will use…
Georges Legros
  • 2,494
  • 2
  • 23
  • 42
2
votes
1 answer

How to create a SAML IDP that authenticates with an API from scratch

Right now I'm rolled in a project where we want to create an SAML IDP with Node. Problem: We have a system that implements an API REST and this API authenticates users, its response has the information of the authenticated user... just as an API…
2
votes
0 answers

Keycloak: permanent API key

I was searching a lot for a way to generate permanent tokens for users in Keycloak, and have discovered a few ways but no one of them really met my needs. Now, I'm thinking to develop another application to map user access/refresh tokens to a API…
alcidesmig
  • 45
  • 1
  • 7
2
votes
0 answers

SSO - Multiple IDP's

How to configure multiple IDP's? One application is tied to 2 IDP's at a time, Primary should be active and secondary should be in standby mode/passive, is this even possible? Please provide some insights on this topic.
2
votes
0 answers

How to configure ADFS with react js app for sso using passport-saml and express js?

I've my reactjs application which needs sso. I've decided to have ADFS as my IDP. How to configure adfs with my react js application. How to use passport saml in reactjs for sso?can i have detailed steps to configure this since am new to this sso…
Sreejith
  • 45
  • 1
  • 1
  • 6
2
votes
2 answers

Enable Email/Password Identity Provider on GCP via Terraform

I'm using the identity_platform_oauth_idp_config teraform resource to configure some OIDC providers on the Google Identity Platform, which is working as expected. The Identity Platform also supports Email/Password and Phone as configurable…
apidae
  • 529
  • 2
  • 5
  • 14
1 2
3
22 23