All Questions
22
questions
0
votes
0
answers
76
views
sustainsys.saml2 http handler doesn't redirect to sing on url in my ASP.NET app
Instead of redirecting to "signOnUrl" my app redirects to the same login.aspx (start page) and I see Access Denied error. I use Pingfederate as Identity Provider. I have the following ...
0
votes
1
answer
981
views
What is the use of resumePath in PingFederate
Can somebody please explain the purpose of resumepath/resumeurl in PingFederate and how can we leverage that while developing custom IdP Adapter for 2FA flow?
If we want to invoke same IdP adapter ...
0
votes
1
answer
2k
views
Passing RelayState between PingFederate(IDP) OpenAM (SP) with Sp-initiated sso
I have successfully configured SAML SSO with OpenAM as SP and PingFederate as IDP with SP-Initiated SSO and using Redirect-Post binding. I am using kerberos adapter for implementing SSO.
However I ...
0
votes
1
answer
9k
views
SAML SSO - received urn:oasis:names:tc:SAML:2.0:status:AuthnFailed error status on saml response from IdP
Our app lies on SAML SSO 2.0 for login. We just got this error in the saml response status from the IdP and I'm not sure what this actually means and what needs to be done in order to get it fixed.
...
- 3,410
0
votes
0
answers
2k
views
How to pass a parameter as part of SAML attributes from a SP
We are currently creating a SSO using Ping Federate for a 3rd party application say App3 .
It is an Idp initaited SSO set up and the SP's for both our application and the App3 is already in place.
The ...
0
votes
1
answer
3k
views
PingFederate IdP startSSO.ping: How to pass data to be placed into SAML attributes?
I have a need to pass data from one system to another, during SSO using PingFederate.
Currently my link looks like this:
https://pingfederate.myexample.org/startSSO.ping?TargetResource=https%3A%2F%...
- 597
0
votes
1
answer
281
views
Configuring SP to send assertions to IDP (PingFederate SAML 2.0)
I'm working on configuring a SP to connect to another IDP using SAML 2.0 and browser SSO. I've finished all of the setup, but am unable to figure out how or if it's possible to send assertions to the ...
- 1
1
vote
2
answers
3k
views
PingFederate: Error Signature Required on SP Initiated Login
The PingFederate server responds with error Signature Required on SP initiated SSO, though we are sending Signature Value in the SAML auth request. Following is the request I am sending to Ping ...
- 195
-2
votes
1
answer
586
views
SAML 2.0 with C# [closed]
I have done so many googling on SAML 2.0 usage with C#, but not found any understandable link. So hope someone can help on this
1) How the SSO is working - A diagram on calls
2) I'm using ping ...
- 331
1
vote
1
answer
2k
views
Rails/Devise/SAML Metadata Incorrect (not working with PingFederate)
Let me preface this question by saying that I'm new to SAML and barely understand how it works.
The Setup
I'm using the devise_saml_authenticatable gem with a Rails 4 app to achieve SSO. The Rails ...
- 4,917
2
votes
3
answers
3k
views
PingFederate and NGinx integration and deployment options
Some time before we started to look how to integrate PingFederate into our infrastructure.
Our initial use case is following: we are providing multy tenant access to our application and different ...
- 2,957
1
vote
1
answer
219
views
SAML 2 (Ping Federate) Should the AssertionConsumerServiceURL be accessible by the IdP?
We are building a website using SSO, we are on the SP side and don't have control over the IdP. We will have multiple environment including local development servers.
The thing is the ...
- 184
4
votes
1
answer
8k
views
Configuring Spring SAML for SSO with PingFederate
We have decided to use Ping Federate to be our SSO solution. I have searched many examples but have not found a spring configuration that clearly describes how I need to set up my SP and/or IdP on the ...
- 65
0
votes
2
answers
3k
views
PingFederate: SP-Initiated single logout 'SLO' with opentoken adapter
When doing an sp-initiated SLO while configuring an opentoken adapter for the IdP. I don't get to go to the adapter configured SLO-Service, what actually happens is that I go to the logout endpoint of ...
- 351
2
votes
1
answer
1k
views
Script access to a Single Sign on enabled Service via PingFederate
Is it possible to authenticate to a SSO - Identity provider (PingFederate) via code. I am trying to reach a service (API) which previously used HTTP Basic auth to authenticate requests.
Since the ...
- 3,512