Questions tagged [single-sign-on]

Single sign-on, a system for sharing authentication credentials between different systems

The term single sign-on covers a wide range of mechanisms for sharing user authentication credentials and rights between different systems. The main purpose of a single sign-on system is to reduce the number of times a user has to enter their login details, usually username and password. and are popular single sign-on protocols.

7557 questions
23
votes
3 answers

GIDSignIn returns "Keychain error"

I'm implementing sign in with Google plus. The implementation is basically copied from examples from Developer Google. When I login for the first time all works fine. But if I then logout using [[GIDSignIn sharedInstance] signOut]; next time I…
zshcbka
  • 416
  • 3
  • 14
23
votes
1 answer

Single Sign-On in Spring by using SAML Extension and Shibboleth

I'd like to implement a Single Sign-on (SSO) authentication layer in my Spring-based application with the aim of supporting authentication and authorization from different security domains. I've chosen Shibboleth as IdP, but I have yet to identify…
vdenotaris
  • 13,297
  • 26
  • 81
  • 132
23
votes
1 answer

Exchange Web Services (EWS) Single Sign-On using TokenCredentials?

I'm working with the EWS Java API 1.2 in an Android application. Logging in with username/password WebCredentials is working fine using something like this: ExchangeService service = new ExchangeService(); ExchangeCredentials credentials = new…
22
votes
3 answers

WebServices security with SAML (SSO) - How to?

The Problem: I want to implement a set of Webservices, protected with SAML. I need to authenticate the users, and also need to authorize based on the user role. I found some questions similar to this one, but none with satisfactory answers. The…
lpinto.eu
  • 2,077
  • 4
  • 21
  • 45
22
votes
2 answers

SAML 2.0: How to configure Assertion Consumer Service URL

I am implementing a SAML 2.0 Service Provider which uses Okta as the Identity Provider. I would like to configure the Assertion Consumer Service (ACS) URL so that the SAML 2.0 from my Service Provider app is reflected back in the assertion. However,…
Venkat Rangan
  • 385
  • 1
  • 2
  • 7
21
votes
7 answers

AWS Java SDK not finding profile when using AWS SSO

I can't reach aws when my login is made using AWS SSO. I login from my computer using: aws sso login --profile staging The profile is configured like this: [profile staging] sso_start_url = https://som-nice-working-url sso_region =…
gorogoro
  • 240
  • 1
  • 2
  • 6
21
votes
6 answers

Web SSO using Java and SAML 2.0

I'd like to write a web application which does the authentication using SAML 2.0 tokens, issued by an identity provider. I understand, according to this question, that there is a viable solution in the PHP world using simpleSAMLphp. Is there an…
spa
  • 5,059
  • 1
  • 35
  • 59
21
votes
1 answer

How to implement Single Sign On using Spring and Active Directory

I have a Spring based Web App which I would like to implement a Single Sign On solution on. The basic flow would be: 1) User logs in into Windows Workstation/Desktop PC (authenticating against organisation's Active Directory) 2) User opens browser…
Lawrence Tierney
  • 856
  • 1
  • 12
  • 30
21
votes
4 answers

How to Implement SSO on existing tomcat web application

I have a tomcat 7 setup with oldApp.war and newApp.war deployed on it. Both the applications share the same login credentials for users on the database. I can access the apps using https://localhost/oldApp and https:localhost/newApp respectively.…
Qstacker
  • 255
  • 1
  • 2
  • 9
20
votes
2 answers

How to get group membership or roles from a Google Apps SAML2 Identity Provider

I did setup my Google Apps for Work Unlimited account to act as SAML2 Identity Provider and register my web application as Service Provider (as explained in the links below). It works great, I can login into my app after login into google with a…
pabloelustondo
  • 2,196
  • 3
  • 19
  • 23
20
votes
4 answers

HTML PHP google single sign on signout will throw "Cannot read property 'getAuthInstance' of undefined"

I have created google single sign on by following steps mentioned in https://developers.google.com/identity/sign-in/web/sign-in The sign in works like a charm but when i try to integrate sign out as per the article in the link i get the following…
manu g
  • 201
  • 1
  • 2
  • 3
20
votes
1 answer

Federated authentication and Delegated authentication in salesforce

Anybody know the difference between Federated authentication and Delegated authentication in salesforce? Can you explain the flow of request in these two methods?
Mohammed H
  • 6,880
  • 16
  • 81
  • 127
19
votes
2 answers

Sample .NET code for a SAML Identity Provider

I'd like to use SAML to allow authenticated users of a website to login to other federated sites. In single sign-on parlance, that means my site needs to become an Identity Provider. Can anyone point me to sample .NET code or documentation for…
sheikhjabootie
  • 7,308
  • 2
  • 35
  • 41
19
votes
3 answers

Android SSO (Single sign-on) for app

Is there any free single-signon mechanism for Android that gracefully works with non-webapps? Say, something along the lines of... You launch my app and use it until it makes a request from the app server that requires authentication. It responds…
Bitbang3r
  • 6,826
  • 5
  • 27
  • 40
19
votes
1 answer

IdentityServer3 bypassing the consents screen

I'd like to bypass the consents screen when a user logs in using IdentityServer3, granting all consents by default. Is there an way to configure this? This is the screen I wish to bypass:
Gavin
  • 5,629
  • 7
  • 44
  • 86