wso2is

WSO2 Identity Server 5.1.0 not returning user claims in SAML Response

这一生的挚爱 提交于 2019-12-06 00:22:10
While trying out the new version of WSO2 Identity Server 5.1.0 I'm having problems returning claims in the SAML response. While this worked in WSO2 IS 5.0.0 SP1. I've mapped the required claims and added them to my SP, also I configured the SP to always return the user attributes. I've configured the SP claim mapping: My SAML configuration: Any help is greatly appreciated. I'm getting the feeling this might be a bug. EDIT: In WSO2 5.1.0 it is required to add the Attribute Consuming Service Index to the SAML Request. In WSO2 5.0.0 SP1 it worked even without setting this value in the SAML

How to delete tenants in WSO2 Identity Server?

柔情痞子 提交于 2019-12-05 12:54:39
In v 4.6.0, we cannot delete tenats through the UI, only disable. However, I see there is a deleteTenant method on the TenantMgtAdminService soap service. I have tried to call this service, but I get an error. From the logs, it has: {org.wso2.carbon.tenant.mgt.services.TenantMgtAdminService} - Error deleting tenant with domain: test7.tenant and tenant id: 136. {org.wso2.carbon.tenant.mgt.services.TenantMgtAdminService} java.lang.NullPointerException at org.wso2.carbon.tenant.mgt.services.TenantMgtAdminService.deleteTenant(TenantMgtAdminService.java:520) Looking at the source code, I think this

Spring Boot: Full authentication is required to access this resource

心已入冬 提交于 2019-12-05 12:14:10
问题 I am doing example of Spring Boot Security with wso2is server from this post https://github.com/angel-git/wso2is-springoauth, when I am trying to access resource with access token I am getting {"error":"unauthorized","error_description":"Full authentication is required to access this resource"} I am generating access token by: curl -u CLIENT_ID:CLIENT_SECRET-k -d "grant_type=password&username=admin&password=admin" -H "Content-Type:application/x-www-form-urlencoded" https://localhost:9443

Refresh token returns invalid grant type

我与影子孤独终老i 提交于 2019-12-05 08:51:13
I'm trying to refresh the access token (based on https://docs.wso2.com/display/IS510/Refresh+Token+Grant ) obtained from wso2 identity server; the server returns an invalid grant type response { "error": "invalid_grant", "error_description": "Provided Authorization Grant is invalid" } The access token is obtained using the "authorization code" grant type with the openid scope. I've turned on the logging on the server; however, I'm not able to determine the reason for the invalid grant type response. How can i get the WSO2 Identity Server to refresh my access token using the refresh token? Logs

rest apis for wso2 Identity server

隐身守侯 提交于 2019-12-04 20:56:01
In the link http://blog.facilelogin.com/2008/10/wsas-hiddedn-services.html I saw WSo2 Soap apis , can I get it's equivalent rest apis. And an example which shows how to pass authentication details. I need this one for wso2 Identity server. In Identity server, You can find many management web services API that can be used for authentication, authorization, user management and so on. Could you let us know the API that you are looking for.. then we can say what is exact web service that you could use. As an example for XACML based authorization, there are "EntitlementService" web service where

Add/create custom user profile details to wso2 IS

守給你的承諾、 提交于 2019-12-04 20:31:04
I have added a new custom attribute named policyid in claim management(as per the post ), Now i want to add the profile details via SCIM endpoint.I tried with the following curl command.. curl -v -k --user admin:admin --data "{"schemas":[],"name":{"familyName":"gunasinghe","givenName":"hasinitg"},"userName":'jouhar',"password":"password"," policyid":"123" ,"emails":[{"primary":true,"value":"hasini_home.com","type":"home"},{"value":"hasini_work.com","type":"work"}]}" --header "Content-Type:application/json" https://example.com:9443/wso2/scim/Users But its not working...pls help.. **My primary

How to change primary LDAP domain of WSO2 IS 4.5.0

我的未来我决定 提交于 2019-12-04 19:45:52
I would like modify the domain of the primary user storage (based on LDAP), but i can not get successfully. The current domain in user-mgt.xml is dc=wso2,dc=org and I would like to change to dc=foobar,dc=com My modified user-mgt.xml is: ... <UserStoreManager class="org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager"> <Property name="TenantManager">org.wso2.carbon.user.core.tenant.CommonHybridLDAPTenantManager</Property> <Property name="defaultRealmName">FOOBAR.COM</Property> <Property name="kdcEnabled">false</Property> <Property name="Disabled">false</Property> <Property name=

Call WSO2 DSS service using ajax?

久未见 提交于 2019-12-04 18:37:51
I have one data service in WSO2 DSS. And also its possible to call using browsers.But i can't make a request using ajax to call this service.I think CORS issue is occurring.So i want to add Access-Control-Allow-Origin parameter to response header.How this is possible in WSO2 DSS ,Any suggestion ? I think you can put a custom headers by adding axis2 custom out flow handler. http://shivendra-tripathi.blogspot.com/2010/04/adding-handler-in-axis2.html?m=1 http://shivendra-tripathi.blogspot.com/2010/04/adding-soap-header-in-axiom.html?m=1 来源: https://stackoverflow.com/questions/22086327/call-wso2

WSO2 API Manager user authencation email

筅森魡賤 提交于 2019-12-04 06:13:56
问题 I have setup a WSO2 API Manager. When I create a user in WSO2 using web console/ using admin services, I want to send a user activation email with link to the user. Can someone point me to documentation OR steps to do this? I am using MySQL to store my users. EDIT: I am using WSO2 API Manager version 2 EDIT: When I try to access https://:9443/services/UserInformationRecoveryService?wsdl WSDL is not found. What are steps to install UserInformationRecoveryService in WSO2 API Manager? 回答1: You

Spring Boot: Full authentication is required to access this resource

若如初见. 提交于 2019-12-03 23:42:40
I am doing example of Spring Boot Security with wso2is server from this post https://github.com/angel-git/wso2is-springoauth , when I am trying to access resource with access token I am getting {"error":"unauthorized","error_description":"Full authentication is required to access this resource"} I am generating access token by: curl -u CLIENT_ID:CLIENT_SECRET-k -d "grant_type=password&username=admin&password=admin" -H "Content-Type:application/x-www-form-urlencoded" https://localhost:9443/oauth2/token and accessing resources by: curl -H GET "Authorization: ACCESS_TOKEN" http://localhost:8080