Questions tagged [openid]

OpenID is an open standard that allows users to be authenticated by co-operating sites

OpenID logo

OpenID is an open standard that allows users to identify themselves to websites by means of a URL which either points directly to an OpenID authenticator, or points to to a page which contains redirection details to such an authenticator. The original website can know with confidence that the user has authenticated themselves to the delegated site, but doesn't know any of the tokens that were used by the user to perform this authentication.

OpenID differs from or in that the user controls which authentication engine is used, and no information other than the success or failure of the authentication is passed to the calling website.

OpenID allows you to use an OpenID account to sign in to multiple websites, without needing to create new passwords / identities.

Website: http://openid.net

Wikipedia: http://en.wikipedia.org/wiki/Openid

50 questions
2
votes
2 answers

Is there an OpenID demo server out there?

I'm doing some experiements with adding OpenID to something I'm working on, and I'd like to test out a few providers. Is there a server out there that will go through the OpenID login process (same way that the StackOverflow group does) and tell me…
billpg
  • 585
  • 1
  • 5
  • 17
2
votes
0 answers

Subversion Server with Azure AD SSO

There is a running CollabNet Subversion Edge Server in the current version 5.2.4. It is currently connected with LDAP for authentication. Now there is a challenge to grant permission to b2b guests of our azure ad to use this SVN. Is there any way to…
1
vote
0 answers

Getting a list of OpenID Connect subjects for a G-Suite domain

I'm setting up an application that supports OpenID Connect authentication, using my G-Suite domain to support single sign-on. To set up per-user permissions, I need to map the OIDC subject to the app's internal user ID. In Google's OIDC…
Steven Grimm
  • 121
  • 3
1
vote
1 answer

Using Apache HTTP user in Tomcat?

I need users to authenticate in Apache HTTP for some static resources (using mod_auth_openid. I also have a Tomcat application running. How can I accept the HTTP user as the Tomcat user, so the users don't need to login twice? Clarification: I don't…
stwissel
  • 640
  • 2
  • 7
  • 21
1
vote
1 answer

How can I set up an authentication system with single instance storage of credentials and several authentication methods/interfaces?

Background: I have a collection of Linux-based servers (let's say a few dozen) that are hosted in different locations. Some servers are lone satellites while others are hosted together in the same data centers. Some are physical hardware servers,…
1
vote
2 answers

OpenID provider using Apache SSL/FakeBasicAuth?

I'd like to set up an OpenID provider for our group, which we can use to log in to internal and external OpenID-aware services (e.g. stackoverflow.com). Our users all have X.509 certificates issued by our CA, so I think the ideal solution would use…
user5746
  • 131
  • 4
1
vote
1 answer

Set up Jenkins to use Crowd's OpenID for SSO?

Been trying to get Jenkins to work with Crowd's OpenID server so we can use single sign-on like with our Atlassian stuff (the Jenkins Crowd plugin can't do SSO). Can't seem to find the proper OpenID URL to give Jenkins though. Only one I can get…
acp
  • 11
  • 3
1
vote
1 answer

openID delegation - no endpoint found

I posted this query on staackoverflow main but it was suggested I should ask here. Sorry for the non-openID login, but as you can see, I'm having some issues. In short: A couple weeks ago I noticed I could no longer log in with my URL delegating to…
Phae
  • 13
  • 3
1
vote
2 answers

DNS trouble - think it might be caused by two NS records

About a week ago, I updated my DNS, adding: HOST, TYPE, VALUE, TTL *.soup-team.com CNAME www.myopenid.com 3600 mail.soup-team.com CNAME ghs.google.com 3600 HOST, TYPE, VALUE, MX, TTL soup-team.com MX aspmx.l.google.com 10 3600 soup-team.com MX…
1
vote
1 answer

Single Sign-On for Azure Virual Desktop

I have the following scenario: A web applications has OIDC authentication/authorization. Using a token from an authenticated user of this application I want to start a RDP session on an Azure Virtual Desktop. On the Azure desktop I do not want to…
DVA
  • 11
  • 1
1
vote
1 answer

Can you recommend a robust OpenAPI 2.0 provider?

Help me find a robust OpenID 2.0 provider! We're looking at various SSO solutions for our organization, and I would like to suggest OpenID as a viable option, since (a) there is good consumer support in a number of web applications, and (b) it's…
larsks
  • 41,276
  • 13
  • 117
  • 170
1
vote
0 answers

Not able to receive jwt token request from apache2 server

I am using OPENIDC for protecting a URL. mod_authopenidc is installed in my apache server.After authenticating the user i have an approve button which is when clicked sends a response with authorization code and state back to my apache.Once that…
user615363
  • 11
  • 1
0
votes
1 answer

Is there an SSO mechanism supported as widely as LDAP?

LDAP is pretty amazing. It lets you set up a bunch of web services that all share a common user database (or rather, directory), so you can have a WordPress installation, a NextCloud, a MediaWiki etc, all of which let you log in with the same user…
TaylanKammer
  • 121
  • 3
0
votes
1 answer

Protecting Apache uri with keycloak auth

I'm trying to configure Apache and Keyloak to grant access to users according to their roles. I'm trying to start with a simple configuration. so I created directory called demo1 in /var/www/ and then dir1 and dir2 inside demo1, next I created two…
No name
  • 21
  • 1
  • 5
0
votes
1 answer

GitLab OpenID Connect Provider - User info missing email claim

I have asked this question on the GitLab forum as well: https://forum.gitlab.com/t/openid-connect-user-info-missing-email-claim/21902 I’m not familiar with OAuth or OpenID Connect. I’m having trouble using GitLab as OpenID Connect provider. The…