Questions tagged [single-sign-on]

Single sign-on, a system for sharing authentication credentials between different systems

The term single sign-on covers a wide range of mechanisms for sharing user authentication credentials and rights between different systems. The main purpose of a single sign-on system is to reduce the number of times a user has to enter their login details, usually username and password. and are popular single sign-on protocols.

7557 questions
36
votes
11 answers

Can you recommend a SAML 2.0 Identity Provider for test?

I'm implementing a SAML 2.0 Service Provider and need to install a SAML 2.0 Identity Provider for testing. Given this need, the Identity Provider should ideally be free (or have a trial period) and be easy to set up and configure. I'm looking for…
Steve Reed
  • 2,481
  • 2
  • 20
  • 20
34
votes
4 answers

Integrate Spring Security OAuth2 and Spring Social

I'm working with a Spring Boot + Spring Security OAuth2 application that I believe was inspired by examples from Dave Syer. The application is configured to be an OAuth2 authorization server, with a single public client using the Resource Owner…
34
votes
4 answers

Pass cookies from HttpURLConnection (java.net.CookieManager) to WebView (android.webkit.CookieManager)

I've seen answers about how this should work with the old DefaultHttpClient but there's not a good example for HttpURLConnection I'm using HttpURLConnection to make requests to a web application. At the start of the my Android application, I use…
quietmint
  • 13,885
  • 6
  • 48
  • 73
32
votes
6 answers

Generating hash key for app using facebook sdk

I am using facebook sdk for login into my application. The application runs fine on HTC devices. The application also works fine on Samsung devices if there is no facebook app pre installed. But if there is already facebook app on mobile and then…
abhishek
  • 1,434
  • 7
  • 39
  • 71
31
votes
3 answers

Keycloak - direct user link registration

I have set up a web application with Keycloak in my local machine. Since Im using Keycloak as SSO implementation, I want in my web app that whenever SIGNUP button is click, user is directed into the registration page, and not going through the LOGIN…
johntanquinco
  • 1,213
  • 2
  • 11
  • 18
31
votes
3 answers

Rails authentication across apps/servers

I've been developing my rails apps whilst keeping them as modular as possible. I'm trying to implement different parts underneath as services. Say an example of Facebook: a) A MainApp that allows the user to have a wall, posts, etc. b) A PhotoApp…
RailsN00B
  • 313
  • 3
  • 5
30
votes
6 answers

How to use Windows login for single-sign-on and for Active Directory entries for Desktop Java application?

I'd like to have my desktop Java application to have single sign on related to Active Directory users. In two steps, I'd like to: Be sure that the particular user has logged in to Windows with some user entry. Check out some setup information for…
Touko
  • 11,359
  • 16
  • 75
  • 105
30
votes
1 answer

How to Create a Client in Keycloak to use with AWS Cognito Identity Federation

I have a user base with identity and authentication managed by keycloak. I would like to allow these users to login and use AWS API Gateway services with Cognito using an OpenID Connect federation. The AWS documentation on using an OpenID Connect…
30
votes
2 answers

Dealing with expired access tokens in OAuth2 implicit grant

The specification of OAuth2 states that an authorization server must not issue a refresh token when using implicit grant. In our use case we protect a RESTful API with OAuth2 and use a Single Page Javascript application as a client for this API. As…
30
votes
5 answers

How can I implement single sign-on (SSO) using Microsoft AD for an internal PHP app?

I'm vaguely aware that on a computer joined to a domain IE can be asked to send some extra headers that I could use to automatically sign on to an application. I've got apache running on a windows server with mod_php. I'd like to be able to avoid…
reconbot
  • 5,138
  • 6
  • 45
  • 63
29
votes
5 answers

Atlassian Crowd experiences?

we (a team of about 150) are considering moving our ALM solution from Bugzilla/CVS to Jira/svn/Confluence/Bamboo/Fisheye. SO has a lot of good info on those, but I would be interested to learn about another tool from Atlassian - a Single Sign On…
webwesen
  • 1,242
  • 4
  • 17
  • 30
29
votes
1 answer

What's the difference between AWS SSO and AWS Cognito?

Let's say I have a few clients: corporation x, y, z. each of those corporation has their employees and their SSO (mostly SAML but can be also OpenId or anything else). I want to be able to integrate with their SSO so they can log in to my…
28
votes
5 answers

Getting Started with SAML and PHP

I'm beginning work on adding SAML SSO support to a project and am looking for any helpful resources specifically geared towards PHP. I understand the basic concepts and have poked around for any libraries that could help but have come up empty. The…
Mike B
  • 31,886
  • 13
  • 87
  • 111
27
votes
4 answers

Cross domain cookies

I have a small problem. How do I set a cookie for multiple domains? I do understand the security problems, and I am sure it has been done before. The reason for this is SSO. ie. account.domain.com will need to set domain logged in…
bear
  • 11,364
  • 26
  • 77
  • 129
26
votes
6 answers

Cookie based SSO

How can I implement a cookie based single sign on without a sso server? I would to share the user logged in across multiple applications using only a cookie on the browser. In my mind it's working like this: user logs in an application the…
frengo
  • 357
  • 2
  • 6
  • 13