wso2is

WSO2 Identity Server 5.1.0 not returning user claims in SAML Response

由 会有一股神秘感。 提交于 2019-12-07 16:58:59
问题 While trying out the new version of WSO2 Identity Server 5.1.0 I'm having problems returning claims in the SAML response. While this worked in WSO2 IS 5.0.0 SP1. I've mapped the required claims and added them to my SP, also I configured the SP to always return the user attributes. I've configured the SP claim mapping: My SAML configuration: Any help is greatly appreciated. I'm getting the feeling this might be a bug. EDIT: In WSO2 5.1.0 it is required to add the Attribute Consuming Service

HTTP requests for WSO2 Identity Server user authentication

由 梦想与她 提交于 2019-12-07 12:25:47
问题 I am writing a REST API to be consumed by our internal applications. I need to login and logout users of the identity server using code grant via http requests presentation I need to know how to call the following endpoints: /authorize (invoked from server-side) /accesstoken (invoked from server-side) /login /logout CASE: Our company has many applications. I want one point of authentication which will happen in their company-x account like how you only need to login to atlassian account to

Refresh token returns invalid grant type

由 只谈情不闲聊 提交于 2019-12-07 04:51:31
问题 I'm trying to refresh the access token (based on https://docs.wso2.com/display/IS510/Refresh+Token+Grant) obtained from wso2 identity server; the server returns an invalid grant type response { "error": "invalid_grant", "error_description": "Provided Authorization Grant is invalid" } The access token is obtained using the "authorization code" grant type with the openid scope. I've turned on the logging on the server; however, I'm not able to determine the reason for the invalid grant type

Connection issues after turning off embedded LDAP

由 你离开我真会死。 提交于 2019-12-06 16:41:39
When disabling embedded-LDAP in my Identity Server install, I receive the following startup errors: [2017-10-09 14:12:03,955] ERROR {org.wso2.carbon.user.core.ldap.LDAPConnectionContext} - Error obtaining connection. [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1] javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1] Caused by: org.wso2.carbon.user.core.UserStoreException: Cannot create connection to LDAP server. Error message Error

Call WSO2 DSS service using ajax?

由 我是研究僧i 提交于 2019-12-06 12:20:36
问题 I have one data service in WSO2 DSS. And also its possible to call using browsers.But i can't make a request using ajax to call this service.I think CORS issue is occurring.So i want to add Access-Control-Allow-Origin parameter to response header.How this is possible in WSO2 DSS ,Any suggestion ? 回答1: I think you can put a custom headers by adding axis2 custom out flow handler. http://shivendra-tripathi.blogspot.com/2010/04/adding-handler-in-axis2.html?m=1 http://shivendra-tripathi.blogspot

oauth access token from SAML response?

由 谁说我不能喝 提交于 2019-12-06 11:10:49
问题 I have one demo application ,it configured SAML2.0 SSO with the WSO2 Identity Server.and also its working fine.Now i want to get oauth token from the SAML response.Is it possible to parse oauth token from the SAML response ,any sugession ? 回答1: Yes. it is supported. You can send a SAML Assertion to the /token endpoint and receive a access token. Identity Server supports for SAML 2.0 Bearer Assertion Profiles and This has been implemented. Here you want to do a POST to the /token end point

integrating nodejs rest services with wso2

由 萝らか妹 提交于 2019-12-06 09:12:11
have my rest webservices written in nodejs. I want to implement role based[admin,user,super admin etc] authorisation for these API's How can use wso2 with NodeJS ? You can use WSO2 API Manager for this. Here is a nice article on how to do that. And here is official documentation. EDIT: You can read the complete product documentation here . And, there is an API Manager Cloud offering too. 来源： https://stackoverflow.com/questions/41164896/integrating-nodejs-rest-services-with-wso2

WSO2 Identity Server 5.0.0 fails to return user claims in SAMLResponse for user from secondary user store

由 烈酒焚心 提交于 2019-12-06 07:39:05
I have this problem when using SAML SSO authentication. I have successfully set up WSO2IS 5.0.0 Identity server, I also succeeded setting up (at least I hope so) secondary user store. I used JDBCUserStoreManager implementation. I have set this store as DOMAIN. This user store works nice, at least I think it does. Because it is storing user attributes into its tables (USER_ATTRIBUTES) and those attributes are read by WSO2IS administration ... https://localhost:9443/carbon/userprofile/edit.jsp?username=DOMAIN/demo_jbu&profile=default&fromUserMgt=true Users are identified as DOMAIN\username so

WSO2 Identity Server external LDAP throws OBJECT_CLASS for OID identityperson does not exist

由 戏子无情 提交于 2019-12-06 06:36:53
I am using the Identity Server 4.1.0 and also I am running an ApacheDS within the Apache Directory Studio. So what I want now is connect my IS to the external LDAP. IS is connecting fine to the ldap, only it throws errors because there are attribute-definitions missing. At least that is my interpretation of the stacktrace. I saw that other people tried it too: WSO2 external ldap not working But my error is different. Also I see how in this blog it is explained well how to use the Directory Studio, but it seems it is all running on the embedded LDAP of the IS: http://www.soasecurity.org/2012/11

HTTP requests for WSO2 Identity Server user authentication

由 …衆ロ難τιáo~ 提交于 2019-12-06 01:45:48
I am writing a REST API to be consumed by our internal applications. I need to login and logout users of the identity server using code grant via http requests presentation I need to know how to call the following endpoints: /authorize (invoked from server-side) /accesstoken (invoked from server-side) /login /logout CASE: Our company has many applications. I want one point of authentication which will happen in their company-x account like how you only need to login to atlassian account to access jira and confluence cloud. The REST API I'm working is for our front-end developers (as of now).
订阅 wso2is