IT Security Stack Exchange
IT Security Stack Exchange

Questions tagged [saml]

An open Single Sign On (SSO) solution for the web, a problem also addressed by OpenID.

142 questions
0
votes
1 answer

How do I change the certificate of a Shibboleth service provider?

How do I change the certificate of a Shibboleth service provider? I have an existing identity provider (IDP) and service provider (SP) and I need to replace the certificate with a Verisign signed cert. I am testing with a self-signed cert created…
Chloe
  • 1,668
  • 3
  • 15
  • 30
0
votes
1 answer

Storing SAML Idp certificates in APP_Data folder

We provided a SAML2 Service Provider to our client, so they can use that to configure their Identity Provider to our Service Provider. My questions is about our client certificate, I'm worried that if I stored their certificate to our APP_Data…
rpmansion
  • 103
  • 3
0
votes
1 answer

Is it possible to analyze real Single Sign-On (SSO) messages via network sniffing?

I am thinking how to gain and analyze the information in the real SSO (request/response) messages, for some commercial SSO solutions. The challenge is that most commercial SSO solutions are black-box or gray-box. I know the OpenID/SAML protocols.…
TJCLK
  • 818
  • 8
  • 23
0
votes
1 answer

Claims based authentication to log on to a device

Are there operating systems that allow logging on to the device (laptop, tablet etc.) using claims based authentication?
Rott
  • 15
  • 3
0
votes
1 answer

What do I need to ask 3rd party to add trust

We have ADFS and want to add a 3rd party application as trusted to it. I have certificate and metadata (xml) URI to give them but want to have a checklist what they need to give me. So far HTTP location of their federation server which active…
Rott
  • 15
  • 3
0
votes
1 answer

Authentication SSO token security - SAML, OpenID Connect

I am trying to understand how works various SSO technologies like SAML 2.0, OpenID Connect 1.0. In general, they work in a similar way providing tokens (XML, JSON) through Identity Provider to Service Provider. What I don't fully understand is how…
user1563721
  • 1,099
  • 11
  • 22
-1
votes
1 answer

Other than domain, what other attribute can SAML work with?

I am very new to SAML and currently doing research on whether SAML is the right solution for me. All the SAML examples that I can find work on the email domain. I wonder if it is possible to build a service provider and identity provider based on a…
Jake
  • 477
  • 2
  • 6
  • 12
1 2 3
…
9
10