Questions tagged [single-sign-on]

Single sign-on, a system for sharing authentication credentials between different systems

The term single sign-on covers a wide range of mechanisms for sharing user authentication credentials and rights between different systems. The main purpose of a single sign-on system is to reduce the number of times a user has to enter their login details, usually username and password. and are popular single sign-on protocols.

7557 questions
26
votes
15 answers

To OpenID or not to OpenID? Is it worth it?

Does OpenID improve the user experience? Edit Not to detract from the other comments, but I got one really good reply below that outlined 3 advantages of OpenID in a rational bottom line kind of way. I've also heard some whisperings in other…
Eloff
  • 20,828
  • 17
  • 83
  • 112
25
votes
2 answers

SSO with SAML, Keycloak and Nextcloud

I am trying to setup Keycloak as a IdP (Identity Provider) and Nextcloud as a service. I want to setup Keycloak as to present a SSO (single-sign-on) page. I am running a Linux-Server with a Intel compatible CPU. What is the correct…
MadMike
  • 1,391
  • 1
  • 16
  • 38
25
votes
2 answers

How could we use GitHub account as an AWS Cognito Identity provider?

By reading Cognito Identity Provider document, I understand that it looks like it provides out-of-box integration with Facebook / Google / Twitter as Identity Providers. My application is a developer focused application so I would like enable users…
chen
  • 4,302
  • 6
  • 41
  • 70
25
votes
2 answers

Login using single sign on (SSO) in Laravel

I plan to introduce a single sign-on (SSO) to my Laravel 5 applications. Basically, I have two websites on different domains. The idea is simple: if I'm already authenticated on one of them, I don't need to sign in on the other. I've been looking…
lesssugar
  • 15,486
  • 18
  • 65
  • 115
25
votes
14 answers

OpenID as a Single Sign On option?

I'm just looking for different opinions. Do you consider OpenID a good "Single Sign On" solution? The way it works seems to be a little bit confusing for an average user and there could be problems related to "putting all your eggs in the same…
Ivan Arrizabalaga
  • 686
  • 1
  • 7
  • 22
25
votes
3 answers

Single Sign ON (SSO) in iOS 7

I have a question about one of new features in iOS 7 - Single Sign On. Are there any detailed info about it? Has somebody already tried it for implementation? I searched a lot of articles and docs - but did not find any useful. I also did not find…
Anton Holub
  • 468
  • 1
  • 5
  • 9
25
votes
5 answers

Single Sign On [SSO] across different domains using Java

We are implementing Single Sign On [SSO] across multiple applications, which are hosted on different domains and different servers. Now as shown in the picture, We are introducing a Authenticate Server which actually interacts with LDAP and…
RaceBase
  • 18,428
  • 47
  • 141
  • 202
24
votes
5 answers

How to use the AWS Python SDK while connecting via SSO credentials

I am attempting to create a python script to connect to and interact with my AWS account. I was reading up on it here https://boto3.amazonaws.com/v1/documentation/api/latest/guide/quickstart.html and I see that it reads your credentials from…
user1015214
  • 2,733
  • 10
  • 36
  • 66
24
votes
3 answers

Simple SSO - using custom authentication - CAS or some Oauth or openid server?

I'd like to know more about the different ways of solving Single Sign-On and their pros and cons. Have you worked with one particular solution, tell me what's good about it and tell me what the limitations or suboptimal parts are. Below are…
oma
  • 38,642
  • 11
  • 71
  • 99
24
votes
8 answers

How to detect if an email is a Google Account?

Me and some guys here are working on an start up. We are currently using Google OpenID API to manage registration and login to our app, but we want to migrate to a easier user registration model. And for this, we need to know if there is a way we…
FernandoEscher
  • 2,940
  • 2
  • 28
  • 27
24
votes
1 answer

Single Sign On (SSO) using JWT

I have read several articles about sso but could not find an answer in my mind. I have a scenario like below: Scenario: My company wants to have sso mechanism using jwt. Company has 2 different domains like abc.com as abc and xyz.com as xyz. Also…
baris usanmaz
  • 839
  • 1
  • 13
  • 31
24
votes
6 answers

Something compareable to 'localtunnel' for Windows

I found this here http://github.com/progrium/localtunnel , and it's exactly what I need, but I am working on Windows and localtunnel is Unix... Some backgorund: I am currently developing a Facebook app and the Single-Sign-On won't work on my local…
woezelmann
  • 1,355
  • 2
  • 19
  • 39
24
votes
2 answers

SSO: How to synchronize user accounts between service provider and Identity Provider?

In a SSO environment, though the user accounts are maintained at IdP, some Service Providers do maintain a database having active user accounts. Now if a user is deactivated at IdP, what is the best way to pass that information to the respective SPs…
abhilash
  • 785
  • 1
  • 10
  • 19
24
votes
5 answers

Which CAS implementation to use in django?

Which CAS implementation should i use to enable CAS single sign on to my django app (trusing a specified CAS server, I'm not interested in creating a CAS provider) ? What I can find are the…
Rasmus Kaj
  • 4,224
  • 1
  • 20
  • 23
24
votes
6 answers

Facebook authorization fails on iOS6 when switching FB account on device

I'm using die Facebook SDK 3.1.1 to implement FB Connect in my iOS application. This works fine in the simple case with either the new FB integration (logged in on iOS) or falling back to the normal authorization via web view (I do not have the…
Kathrin Holweger
  • 241
  • 1
  • 3
  • 5