I new to SSO and I've only tried pysaml2 by far. I am also aware of python3-saml library (and its python-saml Python 2 flavour). I need to use one of those with Shibboleth, if it is relevant. Wh...

My brain is about to explode from a lack of understanding of SSO/SAML. Im currently working on a project whereby we are implementing a SSO identity provider using shibboleth. We have SSO up and r...

I recently upgraded Shibboleth from versionShibboleth-sp-2.5.6.0-win64 to Shibboleth-sp-2.6.0.0-win64 and Apache web server from 2.4.16 to 2.4.23. Post the upgrade, when I try to access my applica...

Chrome 80 will introduce a new attribute which is SameSite. Strict - Only attach cookies for ‘same-site’ requests. Lax - Send cookies for ‘same-site’ requests, along with ‘cross-site’ top level n...

I'm trying to login my university's server via python, but I'm entirely unsure of how to go about generating the appropriate HTTP POSTs, creating the keys and certificates, and other parts of the p...

I installed Jetty 7 and configured it correcty for IdP Shibboleth following this guide: https://wiki.shibboleth.net/confluence/display/SHIB2/IdPJetty7Prepare But when i try to start Jetty I get th...

I have a web application that is being protected by a Shibboleth authentication module. My current config is as below <Location /MyApp> AuthType shibboleth ShibUseHeaders On ShibRequestSe...

My Question: How do I Secure my Node JS API with JWT Token having Shibboleth SSO as the Authentication mechanism? [MY APPLICATION FLOW] I have an AngularJS App and a Back-End Node JS App. Angul...

You might heard about shibboleth and their great solutions as for Identity Provider (https://shibboleth.net/products/identity-provider.html) so is for Service Provider (e.g. nginx https://github.co...

I have a node.js script, using passport-saml, that simulates an SP. My goal is to connect it to this TestShib IdP but I get the following error: SAML 2 SSO profile is not configured for relying par...

1) I don't concretely underdstand fundamental differences between SAML and OAuth. OAuth is for authorization but OpenId for authentication too and SAML both authorization and authentication ? And w...

I'm trying to fulfill a requirement to always have a user be redirected to the same URL after being authenticated through Shibboleth. At the moment, it will redirect to the referrer (which can ch...

I am having a struggle getting this to work so I've created a hell-world Rails app to try and get this to work. Here's the repo with the code that is not working: https://github.com/pitosalas/shi...

I'm deploying Shibboleth IdP 3.1.1 on Tomcat 8.0.22, but I receive this error: SEVERE [http-nio-8080-exec-13] org.apache.catalina.core.StandardContext.listenerStart Exception sending context initi...

I'm looking at a SAML IdP's metadata and it lists three unique certificates - 2 signing and 1 encryption. ... <md:KeyDescriptor use="signing"> <ds:KeyInfo xmlns:ds="http...

I'm trying to automate the shibboleth-based login process for the UK Data Service in R. One can sign up for an account to login here. A previous attempt to automate this process is found in this qu...

Please explain what the differences are between Shibboleth and CAS?

I kind of understand how basic SAML authentication supposed to work: User request resource at SP SP sends auth request to IDP IDP authenticates user and sends back some userId SP sends attribute q...

I am writing an android application for an University that uses Shibboleth for authenticating the students. Since I am making a android native app (not a webview), I would like to programmaticall...

I was thrown on a project where I need to implement web sso. I'm new to SAML. I've set up shibboleth idp. How do I generate IdP metadata in order to give it to service providers.

note: ipums international and ipums usa probably use the same system. ipums usa allows quicker signup. if you would like to test out your code, try https://usa.ipums.org/usa-action/users/request_ac...

I'm successfully logging into my Service Provider test page with Shibboleth. I then go to the /Shibboleth.sso/Session page and I see the following: Attributes affiliation: 1 value(s) entitlement: ...

I'm working on a pure Java web application that uses an embedded Jetty and I want to integrate a Shibboleth login. To do this, I'm following switch.ch's guide for Shibboleth Service Provider Deploy...

Shibboleth is a SSO Authentication that is added to IIS as a "plugin". After a user has done a Login there are Headers showing the Shibboleth Session: ShibSessionID ShibIdentityProvider e...

We have a website running on Caucho Resin. It's written primarily in Java using JSP. We have our own custom authentication on the site. (We're not using any third party authentication framewo...