Questions tagged [saml]

Security Assertion Markup Language (SAML) is a standard for logging users into applications based on their sessions in another context.

Security Assertion Markup Language (SAML) is an XML-based open standard for exchanging authentication and authorization data between security domains, that is, between an identity provider (a producer of assertions) and a service provider (a consumer of assertions).
SAML is a product of the OASIS Security Services Technical Committee.

Also see SAML2.0

3545 questions
1
vote
3 answers

pac4j saml generate sp metaData

I am now comparing spring saml and pac4j saml. Generally speaking, I think pac4j is easier to implement than spring saml. But there are one thing I can not figure out: See this config code: @Configuration public class Pac4jConfig { @Bean …
user3006967
  • 3,291
  • 10
  • 47
  • 72
1
vote
1 answer

SSO with SAML 2.0 for wildcard domain

I'm writing manually a federation metadata XML for “Relying Party Trust” and “Claims Provider Trusts” for ADFS 2.0 This could be a basic example...
icalvete
  • 987
  • 2
  • 16
  • 50
1
vote
1 answer

Using OpenSAML to create and sign response (in Java) but having trouble validating the signature

I am able to create a SAMLResponse using OpenSAML, but as a sanity check I wanted to validate the signature. The recipient wants the Assertion to be signed but not the Response, which looks just fine:
Andrew
  • 199
  • 1
  • 14
1
vote
1 answer

Error in response while using SAML oneLogin code to connect to ADFS as iDP

We are able to login to the ADFS iDP through the saml OneLogin java application. we have followed below steps to Edit the Claim rules of Relying Party(ADFS) to: enable return of email address in response. Right-click on the relying party trust and…
Rashmi
  • 151
  • 1
  • 11
1
vote
1 answer

Sending Username/emailid in the saml req as NameID to Keycloak

We have a requirement to send Username/EmailId in the Subject/NameID field to the keycloak. Keycloak then receive that value in a custom authenticator and send it to the tokenvalidator for further flow. The idea here is to omit the step to ask user…
Rony Joy
  • 124
  • 1
  • 6
1
vote
3 answers

How to get SAML token from Application Pool Identity (for the configured user)?

Is there any way to get SAML token for the Application Pool Identity User (configured user)? when we configure application pool dentity stores config entries (user name & password) in applicationHost.config under %systemroot%\System32\Inetsrv\config…
Akkilz
  • 21
  • 4
1
vote
1 answer

AWS SSO using SAML in php application

I used following Reference URL to configure the AWS SSO for our application. But I'm getting following error from AWS "Your request included an invalid SAML response. To logout, click…
sk2
  • 1,171
  • 1
  • 10
  • 28
1
vote
0 answers

WCF service authenticating incoming SAML from external service

My WCF service will receive incoming SOAP requests containing signed SAML assertions and the only thing I'll have to validate these is a public key given to my by the calling organisation. I want to configure the service to automatically…
Phil McG
  • 11
  • 2
1
vote
1 answer

Inject variable into html input tag value using Html Agility Pack C#

Is it possible using the C# HTML Agility Pack to insert a variable into the selected node? I have created my HTML form, loaded it, and selected the input node that I want, and now I would like to inject in the value field a SAML Response Here is a…
1
vote
0 answers

How do I read SAML 2.0 ( running on apache server) authentication details into my Rails Application?

I built a rails application and i hosted this application with SAML 2.0 authentication which is in apache environment. Now I want to read username(I can see it in SAML header browser plugin), that SAML authenticates in rails application and display.…
vnst
  • 11
  • 3
1
vote
1 answer

saml toolkit base64_decode failing

I have configured the Onelogin SAML Toolkit for PHP per the documentation. Sadly the output from base64_decode() function is incorrect. I used the Onelogin Online decode and Inflate tool and get a correct value with same SAMLResponse. SAML…
1
vote
1 answer

Convert SAML metadata xml into OneLogin parameters

I'm a service provider(SP) and we have customers(IDP) who give us their SAML metadata xml file. We then want to input into our database the requisite parameters for OneLogin to enable SAML SSO. Is there an easy way to pull out SP OneLogin SAML…
Peter P.
  • 3,221
  • 2
  • 25
  • 31
1
vote
0 answers

Google Apps SAML SSO and apps that support google login

If I build a trust with a an Identity Provider and Google Apps using SAML, I can SSO into Google Apps. If I have a session with Google Apps, I can then navigate to a website that supports a Google login (has a sign in with google button such as the…
user2306111
  • 43
  • 1
  • 5
1
vote
1 answer

Is there a way to create SAML assertions in Node.js

I am using a Java client to generate custom SAML assertions to get OAuth tokens from WSO2 API Manager which supports SAML2 Bearer Assertion Profile.…
andunslg
  • 781
  • 14
  • 38
1
vote
1 answer

How to get BasicX509Credential from SAML 2.0 reponse

I would like to validate the signature of the saml response. Currently I can get value of signature variable from assertion using OpenSAML. However, How to get publickey and publicCredential? try { BasicX509Credential publicCredential =…
Kai Liu
  • 21
  • 2
1 2 3
99
100