single-sign-on

HttpContext.Current.GetOwinContext().Authentication.Challenge() Does not open adfs page

旧街凉风 提交于 2020-02-06 09:34:47
问题 I have an single page mvc application that works with angular js. Angular calls api from my asp mvc application including the login. I want to add single sign on to my application My angular check "GetUserRoles" function before transferring to the local login page .. What I am doing wrong, so the line HttpContext.Current.GetOwinContext().Authentication.Challenge() in UserAccountApiController does not open adfs sso page ??? UserAccountApiController [HttpPost] public bool IsLogedInRoled(NR role

Spring OAUTH2 fetch userdetails on oauth client

浪子不回头ぞ 提交于 2020-02-06 07:40:05
问题 i'm fairly new to spring oauth2. I was wondering if it was possible to attached custom userdetails on the oauth client side. something like this @EnableOAuth2Sso @Configuration public class SecurityConfig extends WebSecurityConfigurerAdapter { @Autowired @Qualifier("customUserDetailsService") private UserDetailsService userDetailsService; @Override public void configure(HttpSecurity http) throws Exception { http .antMatcher("/**") .authorizeRequests() .antMatchers("/", "/login**") .permitAll(

Spring OAUTH2 fetch userdetails on oauth client

一笑奈何 提交于 2020-02-06 07:39:26
问题 i'm fairly new to spring oauth2. I was wondering if it was possible to attached custom userdetails on the oauth client side. something like this @EnableOAuth2Sso @Configuration public class SecurityConfig extends WebSecurityConfigurerAdapter { @Autowired @Qualifier("customUserDetailsService") private UserDetailsService userDetailsService; @Override public void configure(HttpSecurity http) throws Exception { http .antMatcher("/**") .authorizeRequests() .antMatchers("/", "/login**") .permitAll(

Cross Domain Login - How to log a user in automatically when transferred from one domain to another

為{幸葍}努か 提交于 2020-01-26 08:02:53
问题 We offer a number of online services. We are required to develop a system which provides a quick/simple experience for users if they are transferred from one service (on domain1.com ) to another service (on domain2.com ). Is there a safe and secure way to log a user in automatically once he has been transferred to the new service? Yell at me if the solution below is completely insecure/wrong. We were considering a system similar to that provided by a number of online services for password

Cross Domain Login - How to log a user in automatically when transferred from one domain to another

旧时模样 提交于 2020-01-26 08:01:05
问题 We offer a number of online services. We are required to develop a system which provides a quick/simple experience for users if they are transferred from one service (on domain1.com ) to another service (on domain2.com ). Is there a safe and secure way to log a user in automatically once he has been transferred to the new service? Yell at me if the solution below is completely insecure/wrong. We were considering a system similar to that provided by a number of online services for password

Username and Password for LDAP Authentication

為{幸葍}努か 提交于 2020-01-26 03:43:05
问题 A client asked us if we support LDAP authentication for a Single-Sign-On (SSO). I Googled around and learnt a bit about LDAP. However, I don't understand whether I should run the bind operation on some credentials that will be given to me as the app and then look for the user that tried to log in, or I should call the bind on the credentials the user attempts to login from through our app and as long as the credentials are valid, I consider that the user is logged in. Thank you. 回答1: It's

How to integrate Ember.JS and Keycloak SSO system

爷,独闯天下 提交于 2020-01-25 13:03:43
问题 My question is quite simple : does anybody know how to integrate Ember.JS and Keycloak (the SSO system) ? We currently face a problem using the Keycloak JS Bower library (https://github.com/keycloak/keycloak-js-bower) to redirect users to Keycloak own login page, and to generally integrate Ember.JS with Keycloak. Our problems are : Double page reload on page reloading, 401 unauthorized HTTP code on login to the Ember App. Thanks for your (precious) support. 回答1: You can use script JS: Check

How to integrate Ember.JS and Keycloak SSO system

旧时模样 提交于 2020-01-25 13:03:28
问题 My question is quite simple : does anybody know how to integrate Ember.JS and Keycloak (the SSO system) ? We currently face a problem using the Keycloak JS Bower library (https://github.com/keycloak/keycloak-js-bower) to redirect users to Keycloak own login page, and to generally integrate Ember.JS with Keycloak. Our problems are : Double page reload on page reloading, 401 unauthorized HTTP code on login to the Ember App. Thanks for your (precious) support. 回答1: You can use script JS: Check

How to logout all clients from Identity Server?

两盒软妹~` 提交于 2020-01-25 06:47:06
问题 Identity Server and two clients (SSO): .Net Core MVC and Nodejs. When I log in with Nodejs client, after refresh MVC (second client) I got logged MVC client. It's good. But when I logout from Nodejs it send back-channel logout url to MVC client. Nodejs doesn't have problems with logout. But MVC client - after browser refresh it stay logged. I read this and this posts but they didn't help. When in MVC Startup i wrote this code: options.Events = new OpenIdConnectEvents { OnTicketReceived = (e)

Kentor AuthService - Read Subject NameID

旧时模样 提交于 2020-01-24 19:40:13
问题 How can I access to saml2:NameID from saml2:Subject response XML node by using Kentor AuthService? I couldn't find in code anything that deals with that part of XML. Maybe I'm missing something. I'm not asking about Kentor IdP, I see that there NameID is sent as additional claim, which is translated as attribute, I'm asking in general, IdP does not have to be powered by Kentor, so I can't rely that I will have this value passed as attribute. So, if it's handled I couldn't find it here: https: