SAML (Security Assertion Markup Language) is an open standard and XML-based markup language for exchanging authentication and authorization information between parties, known as service providers and identity providers.
Questions tagged [saml]
99 questions
0
votes
1 answer
Try to reverse-proxy vsphere webclient with Apache
We want to protect our VMWare vsphere 6.5 web client with an already existing & working Apache 2.4 reverse proxy (benefits e.g. centralised monitoring, mod_security et.al.)
Both communications client <--> proxy, and proxy <--> backend (= vsphere)…
![](../../users/profiles/400607.webp)
MarkHelms
- 171
- 5
- 15
0
votes
1 answer
Beginner ADFS SAML setup with Pingone
Have an external web application our company is going to use at a hosting company. They sent us the setup for PingOne invited SSO. Everything seems pretty straightforward. I began setting up our ADFS environment here at our organization.
ADFS01 -…
![](../../users/profiles/135458.webp)
ouscotty
- 31
- 3
0
votes
1 answer
SAML Remote Desktop Services Windows Server 2012R2
I want to implement SAML for Remote Desktop Services on Windows Server 2012R2.
First, is it possible ?
Then, I want to authenticate users from another AD with my RDS, like this architecture :…
![](../../users/profiles/400349.webp)
Thibaut
- 11
- 1
- 3
0
votes
1 answer
SAML login from different URLs
I have an application which we have recently implemented the use of SAML for authentication. For most of our customers, all their users access the application from the same country. This is simple as there is one URL.
However, some of our…
![](../../users/profiles/400151.webp)
Colin
- 11
- 2
0
votes
1 answer
Cannot login to ADFS from service provider
Scenario
User on AD client machine opens a browser and enters a https url to a service provider.
Browser redirects to ADFS 3.0 IdP and the user is prompted to enter their AD user name and password.
Browser redirects to the SP url and back to IdP…
![](../../users/profiles/379592.webp)
GaryF
- 21
- 1
- 3
0
votes
1 answer
simpleSAMLphp ADFS URLs
I have a website that authenticates to ADFS using simpleSAMLphp. There are 4 web servers running RHEL 6 & Apache 2.2 behind a load-balancer. Call the 4 servers node1.mysite.com, node2.mysite.com, etc.. The users go to www.mysite.com (which points to…
![](../../users/profiles/321655.webp)
Mike
- 41
- 2
- 8
0
votes
2 answers
Steps for troubleshooting Windows ADFS issue
Yesterday I posted a specific question about an error I'm getting in ADFS that has me stumped. Because I have very limited experience troubleshooting windows based products, I think advice on how to approach the problem would be very helpful.
How…
![](../../users/profiles/357446.webp)
blur0224
- 128
- 1
- 10
0
votes
0 answers
SAML on Domino 9.0.1 sending blank Issuer with AuthnRequest
Trying SAML with SSOCircle as IdP provider.
Imported the public Idp metadata from SSOCircle into IdP Config document in idpconfig.nsf. Exported idp.xml from Domino and imported into SSOCircle.
Since out-of-box supported IdP's are ADFS and TFIM, set…
![](../../users/profiles/327694.webp)
Sri V
- 1
0
votes
2 answers
ADFS and Shibboleth: Controlling behavior of Windows authentication
We are doing SSO using ADFS and Shibboleth SP.
In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to https://adfs/adfs/ls/SomeSamlRequest, the browser…
![](../../users/profiles/320595.webp)
Julian B
- 33
- 1
- 4
0
votes
1 answer
Single Sign On with multiple Identity Providers from PHP web app
I'm building a SAAS web app in PHP that needs to integrate SSO. We'll have multiple client organizations, each that have their own Identity Provider (Active Directory). While researching possibilities, I came across SimpleSAMLphp, but I'm not sure…
![](../../users/profiles/288859.webp)
webaholik
- 123
- 7
0
votes
2 answers
Shibboleth 3 - SAML response for Attribute
I have configured Shibboleth 3 to give the SAML response containing the following Attribute Statement
![](../../users/profiles/304004.webp)
Vinay Joseph
- 101
- 4
0
votes
0 answers
Availability/Reliability monitoring of SAML-enabled site
We are running PingFederate to enable access to a number of external application using internal authentication information (so kinda sorta SSO).
There are methods for determining whether the PF service is up and accepting requests generally.
But I'm…
![](../../users/profiles/253567.webp)
Mary
- 565
- 5
- 10
0
votes
0 answers
ADFS and ColdFusion setup regarding certificate
I am so confused about this certification involvement between CF and ADFS talk. When we click on "Generate SP" on ColdFusion administrator, it does create a .p12 file but on the ADFS side, it only accepts a .cer file. So not sure how should I…
user282823
0
votes
0 answers
Keycloak IDP forwarded auth does not redirect to front-channel logout URL
Situation
For my web application, I have set up a keycloak (v18.0.0) realm with an external SAML IDP.
After successfully logging in, the application is using its own cookies (I can't change this since this is an external piece of software) and has a…
![](../../users/profiles/435039.webp)
Theo
- 143
- 1
- 11
0
votes
0 answers
How to configure CyberArk for SAML integration with AWS Cognito
I am new to CyberArk and we are using AWS Cognito as the Login page. Now we need to integrate the users of CyberArk in AWS Cognito using SAML integration. But i didn't know how to configure the CyberArk for the SAML integration ( ie, how to provide…
![](../../users/profiles/578315.webp)
aks
- 37
- 1
- 6