359 questions
- Bountied 0
- Unanswered
- Frequent
- Score
- Trending
- Week
- Month
- Unanswered (my tags)
-1
votes
1
answer
62
views
Is it "standard" to use Keycloak SSO tokens to fetch Google/Microsoft calendar data? [closed]
I’m using Keycloak as my identity provider and I have enabled identity brokering with Google and Microsoft (Azure AD).
My current flow:
User logs in via Google or Microsoft through Keycloak SSO.
In ...
Best practices
0
votes
3
replies
87
views
Is it allowed to ask "Sign in with Apple" users for their real email address if they chose "Hide My Email"?
I’m using Sign in with Apple in my iOS app.
When a user chooses "Hide My Email", I receive the @privaterelay.appleid.com relay address. For marketing reasons, I would prefer to have the user’s real ...
1
vote
1
answer
47
views
Azure AD B2C IdP-initiated SSO : REST TP receives literal {QueryString:...} tokens instead of actual query values
We are building an IdP-initiated SSO flow using Azure AD B2C custom policies, where the journey must:
Read 3 querystring values:
enc_attrs_token, sp, and EntityId
Pass them to a backend REST API via ...
0
votes
1
answer
107
views
Disable keycloak username/password login option
I have integrated Keycloak v26.4.0 into a legacy .net 4.8 webforms app and enabled Microsoft as a provider.
This is all working fine, but I need to disable the Keycloak username/password option so ...
0
votes
1
answer
71
views
Shibboleth 5 IDP issue with static attributes in SAML assertion
I have an issue with the latest Shibboleth 5 acting as SAML IDP. I'd like to add some static attributes to a SAML assertion and everything looks cool when I try to use attribute definitions provided ...
0
votes
1
answer
174
views
Obtain Azure AD cookies to auto-authenticate users in browser app
I have a WPF desktop application that lets employees open enterprise ticket-management portal from inside the UI.
The portal is protected by Azure AD single-sign-on (OpenID Connect). Ideally, I want ...
0
votes
0
answers
30
views
IDP1 GCP2.0 Service to service communication issue in IDP using Istio and harness pipeline
Hi We are facing issue in service to service communication, Istio URL is working fine outside of the container but inside the container neither the Istion URL nor the service URL working to access the ...
0
votes
0
answers
61
views
Harmonix (OPA) on AWS - backstage application
Working on the Harmonix implementation (Harmonix on AWS)
https://github.com/awslabs/harmonix/blob/main/README.md
From the open source code, abele deploy the required resources on AWS account but ...
0
votes
0
answers
36
views
FedCM, are there token formats, what is "id" in the returned IdentityCredential and how are fields transmitted?
I suppose this question is three questions. I have a IdP and RP setup in a lab for FedCM.
My navigator.credentials.get(...) call looks like:
navigator.credentials.get({
identity: {
context: "...
1
vote
1
answer
63
views
No qualifying bean of type 'com.mycom.idp.common.servlet.IdpSecurityAdapter' available, after spring boot upgrade from 3.3.10 to 3.4.3
At the time of running JUnits, below error appears
Caused by: org.springframework.beans.factory.NoSuchBeanDefinitionException: No qualifying bean of type 'com.mycom.idp.common.servlet....
2
votes
1
answer
258
views
IDP create in laravel using Simple SAML php
I am facing a problem with routing and authentication.
I referred to this document:
https://simplesamlphp.org/docs/stable/simplesamlphp-idp.html
I copied simplesamlphp inside my public folder. I also ...
0
votes
2
answers
838
views
How to perform SSO implementation in iFrame
I have two different domain applications.
First.Com
Second.com
I want to load SSO url of Second.com in First.Com page using iFrame.
Scenario 1:
If I open First.Com and try to open Second.com in ...
1
vote
0
answers
399
views
How to Implement Guest Login with Keycloak While Handling High Concurrency?
I'm trying to implement a guest login feature using Keycloak in my API. Here's what I'm attempting:
Created a guest user with a guest role that has minimal permissions.
When a user chooses guest ...
0
votes
0
answers
63
views
Keycloak linking account flow with different devices
I have a keycloak with an external idp configured. I'm focusing on the first login flow in the case of linking account (an existing account with the same email).
Keycloak generates an email to the ...
0
votes
0
answers
73
views
Access Authorization Groups for ECS application sitting behind an ALB
We have a .NET application running on AWS ECS sitting behind a ALB. We would like to authenticate and authorize access to the application via Microsoft AD Groups. After setting up Cognito with AD ...