I am wondering whether there are any major security concerns with providing metadata for SAML configuration on a public URL versus providing the IdP or SP with a metadata file. The metadata include...

I'm using Gsuite as an Saml IDP to authentify users of my organisation on internal apps. Everything is working fine, except for one point: when one of my users if logged in with his/her personal a...

I new to SSO and I've only tried pysaml2 by far. I am also aware of python3-saml library (and its python-saml Python 2 flavour). I need to use one of those with Shibboleth, if it is relevant. Wh...

I have a Service Provider set up at https://biz.dev.originsystems.co.za. I have an IdP set up at http://stage.originsystems.co.za. When testing the authentication with the tool at https://biz.dev....

I successfully set up autoprovisioning for users coming from Google Workspace in AWS IAM Identity Center. Unfortunately, groups are not synced over at all. Right now, groups are mapped as shown in ...

I'm working on a SAML SSO integration for our app using Google / G Suite. Our customers configure our SAML app in their company's G Suite admin settings. The integration works correctly in most cas...

I am upgrading the current Spring Security SAML extension project to SAML2 authentication. I found a question where my sample existing security configuration looks like Existing Security Configurat...

I am trying to implement the SAML SSO authentication functionality. In that, while calling the signedXml.CheckSignature(certificate, true) function it gives the below error and I am not able to fin...

I recently upgraded Shibboleth from versionShibboleth-sp-2.5.6.0-win64 to Shibboleth-sp-2.6.0.0-win64 and Apache web server from 2.4.16 to 2.4.23. Post the upgrade, when I try to access my applica...

Are there any SAML libraries for NodeJS? There seems to be a ton of code available for node but no SAML libraries. If not, is there a reason why not?

Spring Security SAML insists on requesting the Artifact binding in the SAML authentication request (ProtocolBinding attribute): <saml2p:AuthnRequest xmlns:saml2p="urn:oasis:names:tc:SAML:2....

I need a federated authentication with custom policy (when user authenticated I need him to appear marked as Federated in b2c users, not Others or something else what I could achieve with single t...

I'm trying to execute Spring Security SAML Sample application following all steps referenced here : http://docs.spring.io/autorepo/docs/spring-security-saml/1.0.x-SNAPSHOT/reference/htmlsingle/#qui...

I’m using AWS Cognito as User pool (for login) <> Auth0 as SAML-IDP (idp-initiated flow) (as Cognito does not support SAML IDP) <> and connecting to 3rd party SP. I have a web-app which...

I'm trying to implement a SAML SSO solution in .Net, but I'm having a problem parsing the assertion. I have a sample assertion (looks like byte[] data as text) and corresponding .p7b file. I want...

Chrome 80 will introduce a new attribute which is SameSite. Strict - Only attach cookies for ‘same-site’ requests. Lax - Send cookies for ‘same-site’ requests, along with ‘cross-site’ top level n...

I'm implementing a SAML 2.0 Service Provider and need to install a SAML 2.0 Identity Provider for testing. Given this need, the Identity Provider should ideally be free (or have a trial perio...

I am using OpenAM as my IDP and my SP (an angular2 SPA) is based on the example shared at: https://github.com/vdenotaris/spring-boot-security-saml-sample After authentication, my webapp is suppose...

I'm trying to login my university's server via python, but I'm entirely unsure of how to go about generating the appropriate HTTP POSTs, creating the keys and certificates, and other parts of the p...

I'm struggling to design a SAML2.0 authentication for a REST API using a gateway. REST is used between my backend and my application. I'm using Java Servlet filter and Spring. I see two possibili...

Below is the error that I am getting on my console today as opposed to yesterday when the same code was working fine. Error: SAML assertion not yet valid at SAML.checkTimestampsValidityError ...

An app is communicating via the Open ID Connect protocol with AWS Cognito, which is connected to ADFS, communicating via SAML. Cognito is essentially "proxying" the ADFS server. ADFS hold...

I'm usign Google G Suite and created an app which is manage users logins with G Suite SAML. (see. https://support.google.com/a/answer/6087519?hl=en&ref_topic=6304963#) Everything is works smo...

My project is working fine and building fine as well. However, when I add package rsk.identityserver4.saml it gives me error on this code. var builder = services.AddIdentityServer(options => {...

I would like to provision my SaaS application and Google Workspace (ex GSuite) using SCIM. I do not find any documentation for this. Just a list of pre-configured applications. It seems to be well ...