saml-2.0

is the SAML protocol (Sing Sign ON) used soley for web apps and web services, or is it also used for standard applications? REVISED: I am looking for some windows (Standard Applications (not web based)) protocols for Single Sign On If you are looking at Windows specifically, why not use Kerberos and Integrated Windows Authentication? It's built into Active Directory and Domain Controllers. It doesn't really work once you start crossing into the Internet and different security domains but it works well behind your firewall in a corporate environment. However, SAML can be used for desktop

I've been developing a SAML 2.0 SSO. I got a problem in decoding 64Base string to convert it into an xml then read the content later on. Below is the code I've been using: Protected Function uf_getIDFromSAMLRequest(ByVal as_samlRequest As String) As String Dim ms As New MemoryStream(Convert.FromBase64String(as_samlRequest)) Dim decompress As New DeflateStream(ms, CompressionMode.Decompress) Dim xmlMessageBytes As Byte() = New Byte() {} Dim m1 As New MemoryStream(xmlMessageBytes) decompress.CopyTo(m1) Dim document As New XmlDocument() With { _ .PreserveWhitespace = True _ } document.LoadXml

While trying out the new version of WSO2 Identity Server 5.1.0 I'm having problems returning claims in the SAML response. While this worked in WSO2 IS 5.0.0 SP1. I've mapped the required claims and added them to my SP, also I configured the SP to always return the user attributes. I've configured the SP claim mapping: My SAML configuration: Any help is greatly appreciated. I'm getting the feeling this might be a bug. EDIT: In WSO2 5.1.0 it is required to add the Attribute Consuming Service Index to the SAML Request. In WSO2 5.0.0 SP1 it worked even without setting this value in the SAML

SAML 2.0 with the "POST" Binding: Is there any way for Service Provider to ask IdP for user re-authentication for the specific request? I mean first time web user enters login/password, than it stores some sort of cookie in a browser memory so that it remembers the user and does not ask him for password again next time inside the session. I want SP be able to enforce re-authentication which means a command to ask user for password again The only similar thing I found ( ForceAuthn ) and it does not help me: <samlp:AuthnRequest ForceAuthn="true" ... > According to documentation ForceAuthn is

I started with Service Provider based SSO for SAML. Since the user had to enter his email before proceeding with the login, a state variable was initiated and passed on to the SSO. It comes back through the callback URL and hence was check again for the sanity purpose. It protected against CSRF attacks. Now IdP initiated SSO doesn't allow me to set state variable at all. Login starts at Identity Provider and only an auth token is provided to the app. I do not know which user is authenticating from the beginning. If I remove the state variable check, it could trigger a CSRF attack as well. I am