Questions tagged [single-sign-on]

Single sign-on, a system for sharing authentication credentials between different systems

The term single sign-on covers a wide range of mechanisms for sharing user authentication credentials and rights between different systems. The main purpose of a single sign-on system is to reduce the number of times a user has to enter their login details, usually username and password. and are popular single sign-on protocols.

7557 questions
19
votes
4 answers

Is there a way in Java or a command-line util to obtain a Kerberos ticket for a service using the native SSPI API?

I want to implement Single Sign On with Kerberos in Java and have successfully managed to create a ticket for the Service using the ticket from the Windows logon. Unfortunately, I can only create that ticket when the Registry Key…
user269667
  • 461
  • 1
  • 4
  • 10
18
votes
2 answers

Two iOS apps using the same Facebook app ID - is it possible?

I'm using the latest facebook iOS SDK (supporting SSO) to connect my iPhone app with facebook. So far so good.. Since my current app is free with ads, I would like to create another version without ads (which i will charge for). I prefer not to use…
Amir Naor
  • 2,236
  • 20
  • 27
18
votes
4 answers

Google SAML SSO - 403 app_not_configured_for_user error when signed into personal Google account

I'm working on a SAML SSO integration for our app using Google / G Suite. Our customers configure our SAML app in their company's G Suite admin settings. The integration works correctly in most cases: Suppose you're not signed into a Google account…
Sohan Jain
  • 2,318
  • 1
  • 16
  • 17
18
votes
2 answers

What is the relation between CAS vs SAML?

I understand that CAS and SAML are different protocols used for Single-sign on purposes but, what confuses me is articles that say "CAS has an SAML implementation". Aren't CAS and SAML different ways of how Single Sign-on can be implemented ? Lets…
yathirigan
  • 5,619
  • 22
  • 66
  • 104
18
votes
2 answers

How to do single sign-on with NodeJS?

I've got multiple web apps running across multiple domains. I want to implement Single Sign-On, so that a user signs in once to access all apps. How should I implement this? All apps use NodeJS backend. General pointers in the right direction are…
danday74
  • 52,471
  • 49
  • 232
  • 283
18
votes
4 answers

OpenID Connect - how to handle single logout

I'm investigating the use of OpenID connect as the SSO protocol for our enterprise applications (that are consumer facing). In general most aspects of it align with our needs, except for its ability to handle single logout and am hoping for some…
Peter
  • 181
  • 1
  • 4
18
votes
2 answers

Single Sign On for a Web App

I have been trying to understand how this problem is solved for over a month now. I really need to come up with a general approach that work. I have a theory, but I'm just not sure it's the easiest (or correct) approach and I haven't been able to…
Jeremy Goodell
  • 18,225
  • 5
  • 35
  • 52
18
votes
2 answers

How do I simulate an ADFS IdP to facilitate the testing of my SP code

I need to provide a SAML2.0 based Single Sign On (SSO) feature for my node.js service. This will consume SAML assertions generated by an Identity Provider (IdP) running Active Directory Federated Services (ADFS) Ideally I would like to set up a…
biofractal
  • 18,963
  • 12
  • 70
  • 116
18
votes
1 answer

understanding Shibboleth and SAML

I have a Drupal site I am standing up for a client. I've been asked to use Single Sign on using SAML2 (where I would be the service provider and my client would be the identity provider). The best thing I have found so far has been…
Hortitude
  • 13,638
  • 16
  • 58
  • 72
18
votes
5 answers

How can I trust that the SiteMinder HTTP headers haven't been tampered with?

I am completely new to SiteMinder and SSO in general. I poked around on SO and CA's web site all afternoon for a basic example and can't find one. I don't care about setting up or programming SM or anything like that. All of that is already done by…
GregT
  • 1,300
  • 3
  • 16
  • 25
17
votes
1 answer

Behaviour of mobile app browsers with Google sessions and Account Chooser

Problem : Trying to create SSO between mobile app. and browser. What we have: We have an ionic mobile app. with "Login with Google" using OAuth 2.0 authentication. We have multiple inhouse apps that works on OAuth2 and SAML hence, we have SSO…
Kartik Domadiya
  • 29,868
  • 19
  • 93
  • 104
17
votes
1 answer

How youtube gets logged in to gmail account without getting redirected?

Step 1: i logged into my gmail account. Browser actually redirects to accounts.google.com. So i logged in there and redirected back to gmail logged in Step 2: Now in browser i type youtube.com. Without any redirects i get logged into youtube with…
chanchal118
  • 3,551
  • 2
  • 26
  • 52
17
votes
2 answers

Windows AD single sign on using javascript and node

I am in the process of implementing a single page app based on Angular and Node.js, running on a Windows Server within a corporate Windows Active directory domain environment. I know that it is possible to authenticate via AD (by passing a username…
17
votes
4 answers

How do I set up a local test SAML2.0 Identity Provider?

As a Service Provider (SP) I have written a node.js service to processes SAML2.0 Assertions. I would now like to test this code. I am aware that I can use various cloud-based services to act as my test Identity Provider (IdP) however these require…
biofractal
  • 18,963
  • 12
  • 70
  • 116
17
votes
2 answers

How to validate a Kerberos ticket against a server in Java?

we are using JAAS to enable Single Sign On in a Java application using the Windows Kerberos ticket cache. Our jaas.conf config file looks like this: LoginJaas { com.sun.security.auth.module.Krb5LoginModule required useTicketCache=true …
user269667
  • 461
  • 1
  • 4
  • 10