Questions tagged [idp]

Identity Provider (IDP)

IDP on wikipedia

342 questions
2
votes
0 answers

Keycloak: re-authenticate with SAML configuration does not work

I have configured Keycloak to the SAML/IDP given by "samltest.id" and it works if the user logs into the application. On some user actions I want to enforce the user to enter his credentials again. In the application I use the login method in the…
d3rbastl3r
  • 463
  • 1
  • 6
  • 16
2
votes
1 answer

Does SAML SLO (Single Logout) logout from all SP (Service Provider)?

Our javaspring application (sp) allows SSO integration for the clients. We have planned to introduce SLO (Single Logout) as part of the security audit requirement. I have a doubt, if our application request for SLO to idp then the particular…
Selvakumar
  • 360
  • 1
  • 3
  • 17
2
votes
1 answer

How to get Form-Data details having SAML Response under header section of network tab from Browser in angular 8 application?

I am trying to do IDP authentication in angular 8 application.so my angular application first redirect to idp server and then idp server gives me SAML response for further authorization.This SAML response is available in network tab of browser under…
2
votes
0 answers

OpenID Connect redirects to client but user is not logged in

I am trying to set up OpenID Connect IdP-SP pair on a VPS on 2 different subdomains. I successfully managed to make different implementations work on local environment but on the server they don't. I am currently using the certified node.js…
2
votes
2 answers

Get an Access Token from an Identity Provider in .NET Core?

I am setting up OAuth 2 and OIDC at my company. I used oidc-client.js to handle getting the access token for calls to API's protected by OAuth 2 and OIDC from a javascript client. I now need to get an access token when the client is a C# .NET Core…
Vaccano
  • 78,325
  • 149
  • 468
  • 850
2
votes
0 answers

Why AzureAD expects estsrequest parameter in relay state for SAML IDP initiated workflow

We have created a new SAML connector using a generic template in Symantec VIP access manager. We have configured Azure AD as relying party(Service Provider) in this SAML connector with IdP-initiated flow. After login to the Symantec IdP portal,…
2
votes
1 answer

Proxy on top of OIDC IdP provider to accept SAML requests from service provider for SSO

Context: We have an OIDC IdP that we don't have control over but we need to support SAML requests from Service Provider (SP) for SSO. Idea: Build a proxy (an app) that sits between SP and OIDC Identity Provider. Requests from SP are sent to the…
bikashp
  • 563
  • 1
  • 6
  • 15
2
votes
0 answers

Identity Server 4 IDP Auto-redirect to external provider

I need to auto-redirect my user to an idp if specified by the client. I am essentially checking in my AuthenticationController's Login method that if the IDP is set I redirect out to a different method on that controller which then calls the…
A Dyer
  • 113
  • 1
  • 6
1
vote
0 answers

Docker + Keycloak + IIS Reverse Proxy: calls to External Idp "/authorize" endpoint Base Url being replaced by proxy domain name

I have a dockerized keycloak container, running inside a vpn with an IIS reverse proxy which seems to be overwriting the login.microsoftonline.com/[tenantId]/.../authorize endpoint url with the proxy domain name when trying to login to microsoft…
1
vote
0 answers

How to ensure authenticity of custom jwt claims

Suppose I want to implement multi-tenancy in a SaaS app by using a user-pool-per-tenant in my idp. I specify the tenant-id as a custom claim, then use the value of that claim to decide what data to serve to the user. The claim in the idp is…
1
vote
1 answer

Access control implementation with custom rules

I am building a security module(authentication and authorization) for a B2B SaaS based application. We have a straightforward authentication mechanism i.e with username and password with MFA. however, the authorization part is a little complicated…
1
vote
0 answers

How to integrate saml to your springboot application with jumpcloud as the idp

We would like to add one of our internal apps to jumpcloud (we use jumpcloud as our exisiting IDP to login to different services like MS-Office). now to add the internal app to it I firstly am doing a proof-of-concept with a dummy springboot…
Khwaish T
  • 11
  • 2
1
vote
1 answer

How to setup custom domain for FoxIDs control web app

I would like to use my own custom domain for FoxIDs control web app. Is there a way how to setup it, will it be enough to add it to Azure Web App/Custom domains section? Should I do anything else in FoxIDs control settings? There is information…
Vladimir
  • 59
  • 6
1
vote
0 answers

Keycloak external IDP sets existing user by username which is wrong

I have created a simple first login flow for the external IPD (Google). You can see the config on the screenshot. The problem: If I have 2 users with such creds username email email-3.host.com / email-1.host.com / id-1 //this user changed…
bodich
  • 1,708
  • 12
  • 31
1
vote
1 answer

AWS Cognito SSO multiple iDPs

Here's the scenario (using AWS Cognito via AWS Amplify): Our company (ExampleCorp) is building a web application where its users will authenticate via it's own internal Active Directory (SSO). There are also customers of ExampleCorp that will use…