Questions tagged [openid-provider]

147 questions
0
votes
1 answer

How are access tokens distinguished between resource providers in OpenID Connect?

I am working on creating an OpenID Connect (OIDC) Provider based around django-oidc-provider. I have been reading up on the OpenID Connect Spec, and I cannot figure out how access tokens are unique for a certain application. Consider the following…
Panda
  • 690
  • 1
  • 6
  • 19
0
votes
1 answer

Specify popup size for a Dotnetopenauth OpenID Provider

I am implementing a SSO solution for a controlled set of web sites using Dotnetopenauth. It's really cool once you get the hang of it. I am using the SelectorProviderButton on the RP side, as this handles all the popup stuff automatically. However,…
0
votes
1 answer

Getting values from the query string using Janrain's PHP OpenID library

I am using Janrains PHP openID library. All is working perfectly except when I try and pull values from the query string on the script that is returned to after the user is authorized. Here is the first part of the query…
Rory
  • 1,805
  • 7
  • 31
  • 45
0
votes
1 answer

How to generate the OpenID 1.1 sig based on assoc_handle?

I have implemented an OpenID 1.1 provider in Java but I am having trouble with smart clients using an assoc_handle from associate coming up with different signatures. Dumb clients relying on check_authentication work fine. Specifically, I am testing…
Neil C. Obremski
  • 18,696
  • 24
  • 83
  • 112
0
votes
1 answer

What is the OAuth error code to output when a nonce has already been used?

An OAuth server (including Open ID Connect providers) must check a client request's nonce, if one is specified, to make sure the same one hasn't been used in the last 5 minutes. All of this makes sense but my question is simply, what does a server…
Neil C. Obremski
  • 18,696
  • 24
  • 83
  • 112
0
votes
0 answers

how to integrate openid with springboot

I'm new to spring boot and I want to integrate openId provider into our application. I have searched a lot about it but didn't find any suitable article from which I can start. Problem statement: Once user hits our websites url(ex. www.abc.com)…
0
votes
1 answer

Open ID Implementation on Play Framework

I'd like to have my own Open ID server for authentication so that different apps use the same user database. I'm using Play Framework. Is there any library for this?
0
votes
1 answer

phpMyID configuration problems

I have followed the instructions on the read me file and everything seems to be working but when I try to use my own domain address as my OpenID for stackoverflow, I get this error message: Unable to log in with your OpenID provider: Error occurred…
user103798
0
votes
1 answer

How to secure REST service that login from third parties

I have a REST service that my mobile app uses to authenticate when the users click on the Facebook or Google icons. The service accepts the user's id from the provider and checks if it exists on the database and then issues the access_token to be…
user3900456
  • 2,003
  • 3
  • 25
  • 33
0
votes
1 answer

when to use openid.ax.required inopenid

when to use openid.ax.required in making request for authentication.Because if this option is required by google but it is not required by yahoo.
andrew Sullivan
  • 3,944
  • 9
  • 31
  • 42
0
votes
1 answer

how to make openid provider discovery

how to make discovery for openid provider like for orange.fr?
andrew Sullivan
  • 3,944
  • 9
  • 31
  • 42
0
votes
2 answers

how to get url endpoint openid provider

how to get end point url of a openid provider like for google if we get from https://www.google.com/accounts/o8/id or for yahoo it is http://me.yahoo.com .Similarly , for others how to find this information.
Niraj Choubey
  • 3,942
  • 18
  • 58
  • 93
0
votes
1 answer

how does OpenID differ between different logins on the same OpenID endpoint

I am trying to implement an own OpenID endpoint based on SMF user accounts. I based my code on phpMyOpenID and some SMF authorization code. It works fine so far. I can use the endpoint to login/register on any site. If I am not logged in on the SMF,…
Albert
  • 65,406
  • 61
  • 242
  • 386
0
votes
2 answers

Ways to skip user consent in OpenID Connect

In the Authentication Request, if users previously gave consent to some client (for a specific list of scopes) and because they might be prompted for the same authorization multiple times. ¿Could be acceptable to skip it?. ¿Works on both code and…
juanifioren
  • 633
  • 5
  • 18
0
votes
1 answer

Implementing an SSO solution

I'm looking to replace our current SSO system based on openID 1, with an authentication and authorization solution that is more suiting modern needs. One of the things i would like to avoid is having the end user redirected to the identity provider…
1 2 3
9
10