Questions tagged [saml]

SAML (Security Assertion Markup Language) is an open standard and XML-based markup language for exchanging authentication and authorization information between parties, known as service providers and identity providers.

99 questions
0
votes
1 answer

Try to reverse-proxy vsphere webclient with Apache

We want to protect our VMWare vsphere 6.5 web client with an already existing & working Apache 2.4 reverse proxy (benefits e.g. centralised monitoring, mod_security et.al.) Both communications client <--> proxy, and proxy <--> backend (= vsphere)…
MarkHelms
  • 171
  • 5
  • 15
0
votes
1 answer

Beginner ADFS SAML setup with Pingone

Have an external web application our company is going to use at a hosting company. They sent us the setup for PingOne invited SSO. Everything seems pretty straightforward. I began setting up our ADFS environment here at our organization. ADFS01 -…
ouscotty
  • 31
  • 3
0
votes
1 answer

SAML Remote Desktop Services Windows Server 2012R2

I want to implement SAML for Remote Desktop Services on Windows Server 2012R2. First, is it possible ? Then, I want to authenticate users from another AD with my RDS, like this architecture :…
0
votes
1 answer

SAML login from different URLs

I have an application which we have recently implemented the use of SAML for authentication. For most of our customers, all their users access the application from the same country. This is simple as there is one URL. However, some of our…
Colin
  • 11
  • 2
0
votes
1 answer

Cannot login to ADFS from service provider

Scenario User on AD client machine opens a browser and enters a https url to a service provider. Browser redirects to ADFS 3.0 IdP and the user is prompted to enter their AD user name and password. Browser redirects to the SP url and back to IdP…
GaryF
  • 21
  • 1
  • 3
0
votes
1 answer

simpleSAMLphp ADFS URLs

I have a website that authenticates to ADFS using simpleSAMLphp. There are 4 web servers running RHEL 6 & Apache 2.2 behind a load-balancer. Call the 4 servers node1.mysite.com, node2.mysite.com, etc.. The users go to www.mysite.com (which points to…
Mike
  • 41
  • 2
  • 8
0
votes
2 answers

Steps for troubleshooting Windows ADFS issue

Yesterday I posted a specific question about an error I'm getting in ADFS that has me stumped. Because I have very limited experience troubleshooting windows based products, I think advice on how to approach the problem would be very helpful. How…
0
votes
0 answers

SAML on Domino 9.0.1 sending blank Issuer with AuthnRequest

Trying SAML with SSOCircle as IdP provider. Imported the public Idp metadata from SSOCircle into IdP Config document in idpconfig.nsf. Exported idp.xml from Domino and imported into SSOCircle. Since out-of-box supported IdP's are ADFS and TFIM, set…
Sri V
  • 1
0
votes
2 answers

ADFS and Shibboleth: Controlling behavior of Windows authentication

We are doing SSO using ADFS and Shibboleth SP. In a perfect world, Windows authentication would always work, i.e., the user accesses https://shibboleth/Login?target=somewhere, is redirected to https://adfs/adfs/ls/SomeSamlRequest, the browser…
Julian B
  • 33
  • 1
  • 4
0
votes
1 answer

Single Sign On with multiple Identity Providers from PHP web app

I'm building a SAAS web app in PHP that needs to integrate SSO. We'll have multiple client organizations, each that have their own Identity Provider (Active Directory). While researching possibilities, I came across SimpleSAMLphp, but I'm not sure…
webaholik
  • 123
  • 7
0
votes
2 answers

Shibboleth 3 - SAML response for Attribute

I have configured Shibboleth 3 to give the SAML response containing the following Attribute Statement
Vinay Joseph
  • 101
  • 4
0
votes
0 answers

Availability/Reliability monitoring of SAML-enabled site

We are running PingFederate to enable access to a number of external application using internal authentication information (so kinda sorta SSO). There are methods for determining whether the PF service is up and accepting requests generally. But I'm…
Mary
  • 565
  • 5
  • 10
0
votes
0 answers

ADFS and ColdFusion setup regarding certificate

I am so confused about this certification involvement between CF and ADFS talk. When we click on "Generate SP" on ColdFusion administrator, it does create a .p12 file but on the ADFS side, it only accepts a .cer file. So not sure how should I…
user282823
0
votes
0 answers

Keycloak IDP forwarded auth does not redirect to front-channel logout URL

Situation For my web application, I have set up a keycloak (v18.0.0) realm with an external SAML IDP. After successfully logging in, the application is using its own cookies (I can't change this since this is an external piece of software) and has a…
Theo
  • 143
  • 1
  • 11
0
votes
0 answers

How to configure CyberArk for SAML integration with AWS Cognito

I am new to CyberArk and we are using AWS Cognito as the Login page. Now we need to integrate the users of CyberArk in AWS Cognito using SAML integration. But i didn't know how to configure the CyberArk for the SAML integration ( ie, how to provide…
aks
  • 37
  • 1
  • 6