Stack Overflow
Stack Overflow

Questions tagged [saml]

Security Assertion Markup Language (SAML) is a standard for logging users into applications based on their sessions in another context.

Security Assertion Markup Language (SAML) is an XML-based open standard for exchanging authentication and authorization data between security domains, that is, between an identity provider (a producer of assertions) and a service provider (a consumer of assertions).
SAML is a product of the OASIS Security Services Technical Committee.

Also see SAML2.0

3545 questions
16
votes
1 answer

Google G Suite SAML SSO domain login page

I'm usign Google G Suite and created an app which is manage users logins with G Suite SAML. (see. https://support.google.com/a/answer/6087519?hl=en&ref_topic=6304963#) Everything is works smoothly, but I have problem when users not logged in our G…
ugurerkan
  • 790
  • 7
  • 17
16
votes
1 answer

Can I provide the username to use in a SAML request? (AD FS)

When initiating a SAML authentication request (from the Service Provider), is there any way to give the Identity Provider a hint as to which username to use? In my application I know which user it wants to authenticate (based on a unique link the…
joelsand
  • 2,245
  • 2
  • 21
  • 31
15
votes
4 answers

Sign SAML Response with or without Assertion Signature?

When signing a SAML Response that also has a signed Assertion, should I: A) Generate the Response signature without the Assertion signature. Then inject the Assertion signature after both signatures have been generated. B) Generate the Assertion…
Panman
  • 1,157
  • 2
  • 8
  • 19
15
votes
2 answers

Python library for implementing SAML2 based service provider and identity provider?

I am looking for a Python library which can be used to implement SAML2 based service provider and identity provider. The core library should not depend on any particular web-framework. I am looking for something which is more feature complete and…
baijum
  • 1,609
  • 2
  • 20
  • 25
15
votes
3 answers

How does SAML really provide security?

After reading some articles and references, I found that they practically illustrate what is SAML, what components it contains, how it works. Some good links as follows: Good documentation about Shibboleth and SAML? What's the difference between…
lzlstyle
  • 373
  • 3
  • 9
14
votes
3 answers

SecurityTokenInvalidAudienceException: IDX10214: Audience validation failed

I'm developing an ASP.NET Core 2 app using Identity and Sustainsys.Saml2 (for SAML auth). I've made the necessary configurations in the Startup.cs file. Now when I run the project and try to login using the SAML2 (as an external login), I get the…
OnlyOneEA
  • 193
  • 1
  • 1
  • 9
14
votes
2 answers

single sign on (sso) laravel

I have three different laravel websites, I want to make user sign in at one website then he will be automatically logged in to the other two websites. eg. if you logged in at your stackoverflow then open stackexchange you will be logged in with…
Moauya Meghari
  • 471
  • 2
  • 6
  • 23
14
votes
3 answers

How should I be implementing the HTTP POST Protocol Binding for SAML WebSSO Profile?

I've implemented my Service Provider and Identify Provider following the SAML Profile for Web SSO using HTTP POST Protocol Binding. However, I am a bit confused as to how the Identity Provider will provide an if the HTTP POST coming…
John
  • 9,254
  • 12
  • 54
  • 75
14
votes
2 answers

Google SAML app_not_configured_for_user / equivalent of prompt=select_account SAML

I'm using Gsuite as an Saml IDP to authentify users of my organisation on internal apps. Everything is working fine, except for one point: when one of my users if logged in with his/her personal account only, Google will fail with: 403 Error:…
Nico
  • 1,580
  • 14
  • 21
14
votes
1 answer

Recipient vs Audience in SAML 2.0

Can somebody explain what is the difference between Recipient and Audience in SAML 2.0? I found only quite vague explanation from OneLogin…
Victor Ronin
  • 22,758
  • 18
  • 92
  • 184
14
votes
1 answer

Symfony dynamic firewall

On a large webapplication, I want our customers to be able to enable/configure their own sigle sign-on (SAML) identity provider. Each customer has it's own specific subdomain allowing our application to determine which firewall should be…
symfoon
  • 155
  • 1
  • 8
14
votes
4 answers

OpenID Connect will eventually replace SAML as the dominant protocol for SSO?

I have seen in the some articles, It is said that OpenID Connect would replace SAML as the dominant protocol for SSO. I am not sure how openID connect would handle the session management capabilities with different service providers and how it could…
Asela
  • 5,781
  • 1
  • 15
  • 23
14
votes
6 answers

How to created signed AuthNRequest?

I am interfacing with an IDP and have a basic AuthNRequest created as follows:
gbhakta
  • 203
  • 1
  • 3
  • 7
13
votes
5 answers

Saml Authentication Request Protocol Id

When doing Http Redirect Binding with SAML2.0 protocol I should send to the Identity Provider structure like this:
Pawel
  • 171
  • 2
  • 5
13
votes
2 answers

SAMLException: InResponseToField of the Response doesn't correspond to sent message

We are working on an application, which is protected with spring security saml. Authentication works fine, but there is one problem with the following workflow in production environment. user requests the unprotected address www.server.com response…
Ogod
  • 878
  • 1
  • 7
  • 15
1 2 3
…
99 100