1,627 questions with no answers
0
votes
0
answers
18
views
Is it “standard” to use Keycloak SSO tokens to fetch Google/Microsoft calendar data?
I’m using Keycloak as my identity provider and I have enabled identity brokering with Google and Microsoft (Azure AD).
My current flow:
User logs in via Google or Microsoft through Keycloak SSO.
In ...
0
votes
0
answers
34
views
Need help to integrate SSO with SAML for one of the applications through Chrome extension
I have one application which supports SSO login by SAML only. I want to create Chrome extension for that and want to give users option to login to that application using SSO from extension in order to ...
-1
votes
0
answers
28
views
Keycloak - deny access if user email not Verified (using External Identity Provider)
I have Keycloak 26 running for user authentication, and I wanted to add federated users, for testing I basically have another Keycloak running somewhere else (let's call it Keycloak 2). So I create my ...
1
vote
0
answers
45
views
Magento 2 SSO Login: “login_redirect” cookie created on first login, forcing repeated login on checkout
I’m integrating a custom SAML-based SSO module with Magento 2.
The SSO login works, but I’m facing an issue specifically during the first login after the user arrives via SSO
After SSO login, when the ...
1
vote
0
answers
132
views
Tableau SAML (Your account or password is incorrect)
I'm trying to enable additional authentication methods to Tableau Online by adding Keycloak as IDP (SAML). I followed the following steps
Export metadata from Tableau Online
Created a user in ...
1
vote
0
answers
90
views
Importing hashed passwords into Keycloak
I want to create a user using a password that has already been hashed (using argon2). This is to validate the user migration process from my application's database to Keycloak.
I went to ...
0
votes
0
answers
70
views
App is not logged out after doing SSO sign out from other apps
I recently worked on a PHP based project and it implemented Keycloak SSO login system.
There are three apps (let's say App-1, App-2, and App-3) that are using the SSO. App-1 also implemented ...
-4
votes
0
answers
28
views
How to have IDP secure API access between 2 applications?
I have an Application A which authenticates with IDP via SAML-SSO. This application has some APIs that need to be secured. Now there is Application B that needs access to the APIs of Application A.
...
0
votes
0
answers
39
views
Sustainsys Saml2 HandledResult = true still sets the cookie
On AcsCommandResultCreated, I want to set my custom cookie. However, I end up with two cookies: one created by the library and another that is mine, even though I set HandledResult = true. How can I ...
0
votes
0
answers
52
views
How to force refresh of AWS SSO loging "refresh"?
I use metaflow with S3. In order to access S3, I need to login with AWS CLI single sign on (aws sso login). The problem is that I have no way to force "refresh" (not sure about correct ...
0
votes
0
answers
200
views
How can I dynamically refresh a JWT token in Airflow with Microsoft SSO using RSA?
I’ve configured Microsoft SSO with Apache Airflow using RSA-based authentication. The setup involves uploading the public key to the Azure App Registration, while Airflow holds the private key to ...
1
vote
0
answers
86
views
How to implement quick account switching in Keycloak without re-authentication?
What I want to achieve
I need to implement a "quick account switching" feature where:
User logs in with Account A ([email protected])
User clicks "Add Account" in my application
...
0
votes
0
answers
51
views
Unable to acquire new SharePoint Online access token across tenants in Azure AD SSO app (AADSTS50076 MFA error)
We have an Azure AD Single Sign-On (SSO) .NET 8 Core application that transfers documents from one SharePoint tenant to another.
Based on the selected tenant, we retrieve sites, libraries, etc.
We ...
0
votes
0
answers
37
views
SAML attribute for SaaS apps
I am working with Single Sign-On (SSO) using SAML for multiple SaaS applications. Each SaaS provider requires different attribute mappings (for example: email, firstName, lastName, NameID, etc.).
I ...
1
vote
0
answers
62
views
Call SharePoint Rest API with ADFS SSO
I am struggling to call SharePoint Rest API from a site which uses ADFS SSO Authentication. I have tried multiple solutions like this.
But I'm still stuck. Now I have built up a .NET Code to call the ...
0
votes
0
answers
90
views
Why with local storage would email be undefined
I'm configuring Entra OIDC for my team and have run into the issue where the company email only populates in my user store with sessionStorage as my cacheLocation, but not with localStorage. I would ...
1
vote
0
answers
62
views
Does Entra ID Ciam support SSO for Native Authentication
I'm building a mobile app in React Native with Expo. For my authentication flow I'm using Entra ID Ciam but the docs are say two different things:
These docs say I need to at least have the redirect ...
0
votes
0
answers
87
views
Firebase Auth deletes the displayName property after first sign in with SAML provider
I use Firebase Authentication with an SAML provider linked to an Azure SSO in a Next.js web app.
Problem : After a user first signs in, the displayName property in Firebase Authentication is set to ...
0
votes
0
answers
42
views
How to get Keycloak to always store the Broker Context
Keycloak doesn't seem to store broker context in the in the session notes in post login flow.
I am using a custom keycloak SPI to help with user attribute sanitation, in the context of a saml single ...
1
vote
0
answers
239
views
Transform multiple Group Claim value into a single comma-separated string in Entra ID
We've created a new Enterprise Application in our Entra ID (cloud) for connecting to a third-party SaaS solution. Part of their requirements is that we need to supply a claim "teams", whose ...
1
vote
0
answers
383
views
Airflow 3.0.2 + Helm + Keycloak SSO: User role changes from "Admin" to "Viewer" after login
We are using Apache Airflow 3.0.2 with the official Helm chart version 1.17.0, deployed on Kubernetes via Terraform. We're integrating SSO using Keycloak.
Problem
After successful SSO login, users ...
0
votes
0
answers
77
views
When Cloudflare is enabled, my SSO login does not work between my domain and subdomain
I recently placed my client’s site www.domain.com and its subdomain forums.domain.com under Cloudflare’s protection. In general Cloudflare has been excellent at blocking unnecessary and suspicious ...
1
vote
0
answers
168
views
phpMyAdmin OIDC Authentication with OAuth2-Proxy causing redirect loop between login and SignonURL page
I'm currently running phpMyAdmin and OAuth2-Proxy in my kubernetes cluster. OIDC authentication is working just fine, I've verified that PMA_USERNAME is being set properly, and I'm being authenticated ...
1
vote
0
answers
184
views
Apple sign-in with FastAPI returning different state in response
Below is the call to and the callback for my Apple sign-in implementation.
async def login_with_apple(request):
logger.debug(f"Session before Apple login: {request.session}")
...
1
vote
0
answers
40
views
LinkedIn OpenID Connect – 403 Error: Missing r_emailaddress / r_liteprofile scopes despite configuration
We're implementing a LinkedIn login for our non-profit platform built with MediaWiki. We're using OpenID Connect and following the official Microsoft documentation step-by-step.
However, we encounter ...
0
votes
0
answers
37
views
Is there any way to Implement PingIdentity with Angular's HashRouting?
So, I have an angular web app that our org wants to integrate with PingIdentity and SSO. The 2LDR Problem is, we have HashRouting set on our application, and PingIdentity will not accept an ACL (...
1
vote
0
answers
102
views
Keycloak IDP initiated SSO setup
I have the following setup
Keycloak A is the Service provider under dev.my-host/auth
Keycloak B is the Identity provider under staging.my-host/auth
My application is on dev.my-app
Both using master ...
0
votes
0
answers
46
views
Microsoft Entra Id SAML Response Username encrypted
I setup federated login to Cognito with Entra Id as the IdP. When I require encryption, the user name created is encrypted. When I don't require encryption, the username is not encrypted. Shouldn't ...
0
votes
0
answers
102
views
sqlalchemy.exc.InterfaceError: Token is expired
sqlalchemy.exc.InterfaceError: (pyodbc.InterfaceError) ('28000', "[28000] [Microsoft][ODBC Driver 17 for SQL Server][SQL Server]Login failed for user '<token-identified principal>'. Token ...
0
votes
0
answers
55
views
SSO login with incognito mode force session to be started multiple times
I am working on an ASP.NET MVC application. We use few external login providers 'Google' and 'Azure' are used mostly. During investigation one issue with Google login, I discovered that session start ...
0
votes
0
answers
59
views
How can I run multiple tests in the same Chrome window
I have seen several posts around this, but none that really answer how to do it. We are currently using Selenium and Java to test our applications in Chrome. We are moving to a single sign-on (SSO) ...
0
votes
0
answers
36
views
Okta Custom Claim as permissions
Is it possible to use permissions as custom claim in okta id_token? If not then how can I get permissions claim in my okta token?
I'm looking to get key as permissions in token claims and value should ...
0
votes
0
answers
71
views
How to Exchange Identity Provider ID Token For Clerk Session Token
I have the following setup:
Mobile app, using React Native + Expo
uses Auth0 for authentication
has a WebView that embeds my web app:
Web app, using NextJS
uses Clerk for authentication
Clerk uses ...
0
votes
0
answers
41
views
Issue with GitHub OAuth Callback URL and OAuth State Mismatch in JupyterHub with Azure SSO
Description:
We are using Azure SSO for authentication with JupyterHub. Within our JupyterLab environment (or a custom image based on JupyterLab), we have a functionality that requires GitHub OAuth ...
0
votes
0
answers
59
views
Using Custom GitHub SSO URL with OAuthenticator in JupyterHub Results in OAuth State Missing Error
Description
We are using GitHub as an authentication provider for JupyterHub using OAuthenticator. The authentication flow works perfectly when users are already logged into GitHub, as it directly ...
0
votes
0
answers
65
views
Using SAML or OKTA to as Keycloak admin login
We are trying to look for a good documentation of using SAML or Okta for individuals in our organization with the "administrator" role to access the Keycloak admin.
We don't want to use SAML ...
1
vote
0
answers
99
views
Can't redirect correctly after Azure AD SSO (Kotlin+React)
Hi i'm currently trying to setup SSO with the Azure AD for my application.
It seem to almost fully work as i can see log from the server that indicate that the authentication is successfull, i can ...
0
votes
0
answers
16
views
Hidden log-in to prevent SSO jump
I have come across a problem that is inconvenient for the users and I was tasked to investigate. I do understand that this use-case is similar to potential malicious intents and I do understand why ...
0
votes
0
answers
112
views
SAML SSO Spring Boot - Validating certificate using SAML Assertion Response
I am using spring boot (3.3.0) to configuring SAML based SSO using Azure AD. After successful login, I want to know whether the SAML Response is validated using the certificates which is configured in ...
0
votes
0
answers
102
views
Loop through AWS accounts using PowerShell
My company uses what I assume is federated access through SSO to connect to AWS, we have above 50 AWS accounts that I need to loop through to pull cost related data and I find myself a bit stuck.
I'm ...
0
votes
0
answers
105
views
How to Map Roles from OpenID Connect SSO Provider in a Multi-Tenant System?
I have implemented an OpenID Connect (OIDC) Single Sign-On (SSO) system for my platform. Users only need to configure their client ID, client secret, authorization URL, and token URL to enable ...
0
votes
0
answers
47
views
How can Spring sso work without using unsafe-inline?
The Spring sso class Saml2WebSsoAuthenticationRequestFilter creates a hard-coded html page with an inline javascript redirect.
<!DOCTYPE html>
<html>
<head>
<meta ...
0
votes
0
answers
161
views
FastAPI application redirect to HTTP and not HTTPS
Im using FastAPI via Uvicorn, and deploying my application to an Azure App Service. Its being deployed to
# Start
if __name__ == "__main__":
uvicorn.run(app, host="127.0.0.1", ...
0
votes
0
answers
49
views
Unable to connect via saml sso login to Azure AD
I am using django as backend and I am trying to do saml sso login for Azure AD. I am getting below error for xmlsec. I am using djangosaml2, pysaml2 in django backend for saml auth
error=Error: ...
1
vote
0
answers
294
views
Google Apps Script SSO Login with OAuth 2.0 Redirect Issue
I am developing a simple web application using Google Apps Script, where users log in via SSO (Google Sign-In) and, upon successful authentication, are redirected to the home page.
What I have done so ...
0
votes
0
answers
19
views
How to reuse passwords with OAuth2
I have an applications that uses the users login password for multiple purposes aside from authentication. The password is only used on the client side (in javascript) and never transmitted to the ...
0
votes
0
answers
91
views
ASP.NET MVC on .NET 4.7.2 implementing SSO
I have an existing ASP.NET MVC app on .NET 4.7.2 that we are updating and also trying to implement SSO using WSFederation. In our Startup class, we have the following code:
public void Configuration(...
0
votes
0
answers
66
views
django-allauth: enforce policies for certain users
I'm looking to implement django-allauth for an existing project, mainly to add OTP and SSO.
I have an SPA so I would need the allauth API as documented here.
However, since this requires quite a lot ...
0
votes
0
answers
90
views
How to implement single sign on (SSO) using Kerberos Authentication in PowerBuilder
We are running on the PB IDE Version 2022 Build 1900 and ours is a desktop application. The backend DB is Oracle 19C. We need to implement Kerberos Authentication for single sign on, with which we can ...
0
votes
0
answers
27
views
Not able to create subscription for a multi tenant app
I have a B2B application where we can onboard multiple tenants. Their users can use SSO to login/sign up on our mobile application.
I want to get notified when the admin of a tenant deletes a user (in ...