Questions tagged [openid-provider]

147 questions
2
votes
1 answer

Use Microsoft Identity Platform as External Auth provider in AspnetCore Identity

I am successfully using Azure AD and Office365 as a login provider in AspNet-Core Identity by using Microsoft.AspnetCore.Authentication.OpenIdConnect and calling AddRemoteScheme("AzureAD","Office 365",_=>…
2
votes
2 answers

Are their logout urls for all the Openids?

Suppose I login to xyz.com site via Google. Then when I signout of the xyz.com site but google still keeps on logged in. As for facebook there is logout url, with which we can logout facebook as well. Are there logout urls for all open ids, like…
Chetan Sharma
  • 2,539
  • 5
  • 25
  • 41
2
votes
0 answers

Authentication on NodeJS OpenID Identity Provider Server

I'm pretty new with all this so this might be a stupid question, just trying to get a better understanding. I need to make an identity provider server, but I'm not sure how to go about some steps after that. If I create an identity provider server…
Flengo
  • 81
  • 1
  • 8
2
votes
0 answers

OpenID Connect redirects to client but user is not logged in

I am trying to set up OpenID Connect IdP-SP pair on a VPS on 2 different subdomains. I successfully managed to make different implementations work on local environment but on the server they don't. I am currently using the certified node.js…
2
votes
1 answer

How does an OpenID Provider authenticates an end-user?

OpenID Connect 1.0 enables Clients to verify the identity of the End-User based on the authentication performed by an Authorization Server and provides claims in exchange for an access token. The access token is provided to /user_info or /me…
Kartik Chauhan
  • 2,779
  • 5
  • 28
  • 39
2
votes
3 answers

Can an OpenID Connect Provider be certified if it does not support unencrypted ID Tokens and Userinfo?

I'm working on a provider where it is required by external factors that the id token and the userinfo always be encrypted. The server itself is and must be zero-knowledge (as weird as it sounds). In my understanding the core spec does not forbid…
Ercinee
  • 23
  • 7
2
votes
1 answer

I can't get OpenID to work (openid.consumer.consumer.ProtocolError: Parameter next not in return_to URL)

I'm using Django-Allauth in my Django project. I added some Social Providers (Facebook, Google) and it works perfectly! But I'm facing a problem when trying to use OpenID providers. I've been testing it with Yahoo and AOL so far, and both end up…
2
votes
1 answer

DotNetOpenAuth IAuthenticationRequest member explanation request

I'm beginning to use DotNetOpenAuth and want to understand what the following members of the IAuthenticationRequest interface are meant for and how they should be used: IsDelegatedIdentifier: bool IsDirectedIdentity: bool And from the inherited…
Confused
  • 869
  • 1
  • 7
  • 16
2
votes
3 answers

Problems integrating openId selector with Asp.Net MVC 2

I am trying to use the openid selector javascript library to allow OpenId login for a web site. I'm following the instructions on this site, but I'm not usually a web programmer and its not working and I'm not certain why. I'm sure its something…
Sam Holder
  • 32,535
  • 13
  • 101
  • 181
2
votes
1 answer

Our OpenID Connect request succeeds though it lacks required parameters

I'm using Fiddler to issue the following request to our OpenID Connect Identity Server. POST http://localhost:50000/connect/token HTTP/1.1 User-Agent: Fiddler Host: localhost:50000 Content-Length: 73 Content-Type:…
Shaun Luttin
  • 133,272
  • 81
  • 405
  • 467
2
votes
2 answers

OpenID provider library recommendations for PHP

Our PHP site uses a home-grown forms auth implementation. We're considering making our site into an OpenID provider so that we can authenticate (using our exisitng user accounts) users on a StackExchange site. If we have to add code or UI to our…
Justin Grant
  • 44,807
  • 15
  • 124
  • 208
2
votes
0 answers

"Error in parsing the OpenID auth request" when realm and return URL start with HTTPS prefix

I'm trying to implement Google OpenID and use URLs starting with https:// for both the realm and the return URL. When I pass: openid.realm=http://mysite.com openid.return_to=http://mysite.com/CompleteLogin it works just fine, but when I…
sharptooth
  • 167,383
  • 100
  • 513
  • 979
2
votes
1 answer

Making an OpenID Provider with SSL

so I'm currently trying to make an OpenID provider. I've tried using two Java based OpenID server packages- Atlassian's Crowd, and WSO2 Identity Server. Now, in my implementation, security is a must, which means using SSL and having HTTPS based…
2
votes
0 answers

OpenId 2.0: session type vs. association type

The OpenID 2.0 specification says very little about the relation between the session type and association type in OpenID association requests. My questions: (1) Is a combination of session type "DH-SHA1" and association type "HMAC-SHA256" valid? …
jochen
  • 3,728
  • 2
  • 39
  • 49
2
votes
1 answer

Implement "local" user management on GAE

I want to develop a business app on GAE. The business proprietor somehow does not like or misunderstands the OpenID idea, insists on implementing local user management: registration using login and password stored in the app's data store. I would…