onelogin

OneLogin SAML Assertion with MFA. Security Questions and OneLogin Protect

由 拈花ヽ惹草 提交于 2019-12-23 02:48:05
问题 I am attempting to generate a SAML assertion using the OneLogin API. For some assertions, multi-factor authentication is required. User accounts can have either or both of OneLogin security questions or the OneLogin Protect app as secondary factors. My question is, what is the process to initiate either of those factors? The SAML Assertion API call verify factor works when the OTP from OneLogin protect is provided, however we would like to initiate a push to the OneLogin Protect App.

OneLogin API credentials

由 六眼飞鱼酱① 提交于 2019-12-13 03:14:41
问题 Im trying to make a basic call to the ONELOGIN API. After generating the cliend ID and secret with MANAGE ALL permissions, im still unable to connect Generated correctly the ID and secret with the right permissions as per official documentation curl 'https://api.us.onelogin.com/auth/oauth2/v2/token' \ -X POST \ -H "Authorization: client_id:, client_secret:" \ -H "Content-Type: application/json" \ -d '{ "grant_type":"client_credentials" }' i expected to connect, instaead the output is {"status

OneLogin - how can I redirect a user to another page after successful login?

由 送分小仙女□ 提交于 2019-12-12 20:37:08
问题 According to the OneLogin documentation, the final steps to log in a user via API calls are: Generate a session_token and submit it via form POST to a OneLogin url The OneLogin server will then start a session for you and return an httpOnly, domain specific cookie to your browser. Recognize that the form POST returned a 302 redirect status and send the user to another page My question is how are you supposed to handle #3? Especially with regards to the cookie that is returned. The

SAMLResponse null in ACS request url :using onelogin toolkit

由 跟風遠走 提交于 2019-12-12 03:41:45
问题 I am using Onelogin 2.0 toolkit . Instead of having Login and ACS as jsp files I have added them as rest services. I am getting this error when my IdP redirects to ACS Service Url. SAML Response not found, Only supported HTTP_POST Binding In request to ACS service SAMLResponse parameter is coming as null. How can I fix this ? @Path("/saml") public class SAMLAuthService { @Context HttpServletRequest request; @Context HttpServletResponse response; @GET @Produces(MediaType.APPLICATION_JSON)

Accessing Third Party Apps After Creating A Session Via API Token

由 匆匆过客 提交于 2019-12-11 04:41:43
问题 I've scoured the api docs, as well as StackOverflow, and I've yet to find the answer to my question. And it is possible I'm misunderstanding how the system works. Here's the scenario our client wants: User logs into our website At which point we authenticate the user in our system, and One Login via the api. After the user logs into our dashboard, they can click an link and be redirected to their third party analytics app due to the fact that I've created a new session with One Login. Here

Python SAML OneLogin - How to support multiple Identity Providers

由 ▼魔方 西西 提交于 2019-12-06 13:25:57
I'm relatively new to SAML and came across the OneLogin Python SAML library. I was able to get it up and running with my web app being the Service provider (SP) and OneLogin being the Identity Provider (Idp). I would like to be able to add support for other Identity Providers as well. However, I find that the python-saml library is using a settings.json to get the Idp information. I have looked at the following issues on their Github project but have been unable to get an actionable solution: [1] https://github.com/onelogin/python-saml/issues/64 [2] https://github.com/onelogin/python-saml

SAML for Native Mobile Apps(Android and IOS)

由 僤鯓⒐⒋嵵緔 提交于 2019-12-06 04:10:23
问题 I have been searching for quite long time, whether SAML Authentication available for Mobile Apps. I went through the oneLogin developer portal completely, but could not find any documents on Android and IOS Api. Can somebody please confirm me whether SAML gives support to Mobile Apps or not. 回答1: Folks who go this route generally just implement a WebView and handle the SAML request that way. Take a look at this article on Webviews as this will allow you to share information (notably any

AWS API credentials with OneLogin SAML and MFA

由 喜欢而已 提交于 2019-12-01 14:53:56
问题 We want to allow our users to retrieve a set of temporary CLI credentials for a given AWS role by signing in to OneLogin with password and MFA. We have a working solution, but it requires the user to fully re-authenticate to OneLogin (including MFA) every 60 minutes as the AWS temporary credentials expire. I think that won't fly - our users are accustomed to permanent API credentials tied to a real IAM user. Ideally, we'd like to allow users to authenticate once a day, securely cache the
订阅 onelogin