Questions tagged [saml]

Security Assertion Markup Language (SAML) is a standard for logging users into applications based on their sessions in another context.

Security Assertion Markup Language (SAML) is an XML-based open standard for exchanging authentication and authorization data between security domains, that is, between an identity provider (a producer of assertions) and a service provider (a consumer of assertions).
SAML is a product of the OASIS Security Services Technical Committee.

Also see SAML2.0

3545 questions
1
vote
1 answer

Unable to get all SAML:Attribute

I am trying to implement SSO using MVC. Below is a part of my sample SAML that is being generated from my organization's ADFS.
Sanketh. K. Jain
  • 489
  • 1
  • 9
  • 24
1
vote
2 answers

Is LDAP suitable for external users?

LDAP often times used to provision enterprise users. It acts as a centralized user store. Easy to integrate with SaaS with SCIM API. But is it a good idea to use LDAP for external users if we want to implement single data store for authentication…
pinkpanther
  • 4,770
  • 2
  • 38
  • 62
1
vote
1 answer

Is SOAP communication mandatory for SAML?

Is SOAP a mandatory requirement for SAML communication? For SP initiated SAML, from saml.xml.org: The SP's Assertion Consumer Service now sends a SAML message containing the artifact to the IdP's Artifact Resolution Service endpoint. This exchange…
user235273
1
vote
1 answer

How to configure SAML on Grails 3.x

Can anyone advise how to run a Grails 3 app with SAML? I have a Grails 2.5 app running SAML using spring-security-saml:2.0.0 but it doesn't support Grails 3.x.
1
vote
1 answer

SP Init SSO using javasaml

I am quite new to this world and learned a lot in last two weeks.Coming to the point, I am drafting a solution for Service Provider Initiated SSO(on the application) supporting multiple Idp's. I am using onelogin's javasaml library and configured…
1
vote
1 answer

configuration for devise with omniauth-saml

After configure, i tried to start the server and said this: Wrong OmniAuth configuration. If you are getting this exception, it means that either: You are manually setting OmniAuth.config.path_prefix and it doesn't match the Devise one You are…
Marcos R. Guevara
  • 5,258
  • 6
  • 19
  • 44
1
vote
0 answers

Page not opening on host machine when link is opened with IP Address and throws Failed to load resource: net::ERR_TUNNEL_CONNECTION_FAILED

I am trying to implement SSO on a hybris system using idP. The link to the hybris is opened using a third service- 10.x.x.x:9002/samlsinglesignon/saml/yacceleratorstorefront/assisted-service/emulate/?customerId=&site=Electronics But the page gives…
1
vote
0 answers

Code failing to validate SAML Response on digest

Update I have figured out why the reference validation is failing. Unfortunately, I can't figure out what to do about it. When parsing the "sigString" String variable into the "doc" Document variable, the LINEFEED characters are being converted into…
Jason Lyle
  • 141
  • 4
1
vote
0 answers

SAML request signature verification c#

I am creating a SAML Identity provider, and our service provider is using a third party tool Component Space to do their end's work. Identity provider I developed takes login credentials from a user and validates that user on our active directory…
1
vote
1 answer

Using saml tokens in Azure AAD oauth authentication

I have an application that authenticates users agains Azure AD using OAuth and I want to provide the ability to setup certain information associated to each user by his admin in Azure AD, so I can read it as part of the authentication process. I…
Jesuspc
  • 1,664
  • 10
  • 25
1
vote
1 answer

Crypto: "Error: PEM_read_bio_PUBKEY failed"

An error is thrown by xml-crypto in the function "verify-signature", and I don't understand why: Error: PEM_read_bio_PUBKEY failed at Error (native) at Verify.verify (crypto.js:311:23) at RSASHA256.verifySignature…
L. Sanna
  • 6,482
  • 7
  • 33
  • 47
1
vote
1 answer

Configuring SSO utilizing ADFS 2.0, SAML 2.0, and simpleSAMLphp

My knowledge of these systems is not large so please forgive me if I am asking dumb questions. I hope to achieve the following: Idp (AD FS 2.0) -> SAML 2.0 -> Sp (simpleSAMLphp) *I don't need anything more fancy than to simply authenticate a…
Dan
  • 11
  • 1
  • 3
1
vote
1 answer

Node.js / SAML: How to decrypt contents of RequestedSecurityToken

I'm using the passport-wsfed-saml2, the passport strategy for both WS-fed and the SAML2 protocol. The WS-fed part of the logic does not seem to handle RequestedSecurityToken elements whose content is an element. This makes the…
Jeremy Danyow
  • 26,470
  • 12
  • 87
  • 133
1
vote
0 answers

SAML integration of WSO2 with OpenAM

Can WSO2 APIM SAML authenticated using Forgerock OpenAM. I followed WSO2 documentation and few blogs but still wasn't able to achieve this. I want the WSO2 APIM URL to be redirected to Forgerock OpenAM and once I authenticate using the OpenAM user I…
1
vote
1 answer

Getting Error Validating SAML message, in ADFS 3.0

I am getting an error in single sign on process. I am using sample saml spring extension and integrated it into my existing application with ADFS 3.0, Everything is fine but after successful authentication at adfs side when its redirecting back to…
Jayesh Sangle
  • 51
  • 1
  • 6