wso2is

WSO2 Identity Server managing users and roles through API

情到浓时终转凉″ 提交于 2019-12-01 17:47:48
I need to create and manage users in WSO2 Identity Server 3.2.3 through API, I've tried the code sample from http://blog.facilelogin.com/2010/05/managing-users-and-roles-with-wso2.html but is out of date. Is there any way of managing users and roles without the WSO2 user interface? Asela All management services in WSO2 Carbon, have been exposed as Web Service API. For user management, you can use UserAdmin API, where you can do all management functions related to users and roles in the user store. Please find the sample for UserAdmin API from here . README file contains more details for you.

Set WSO2 identity provider as default IDP for new applications

故事扮演 提交于 2019-12-01 13:34:47
I am using WSO2 Identity Server 5.1.0 and configured ADFS as an Identity Provider using the management console. I tested the created IDP by selecting it in one of my service provider and all is working as expected. Now I want to set up the ADFS IDP as the default IDP. For that I configured the file (identity/service-providers/default.xml) as explained in this post . The problem is that when I try to access my application, I get the following error: TID: [-1234] [] [2016-02-11 16:21:46,521] ERROR {org.wso2.carbon.identity.application.authentication.framework.handler.request.impl

WSO2 Identity Server with OpenId Connect

自闭症网瘾萝莉.ら 提交于 2019-12-01 12:20:27
问题 I am trying to use WSO2 Identity Server (5.1.0) with Asp.Net MVC, as a proof of concept i created a sample asp.net MVC project in visual studio 2015. Following the WSO2 Guide, i have configured the identity server as required. https://docs.wso2.com/display/IS510/OpenID+Connect+with+the+WSO2+Identity+Server+and+WSO2+OAuth2+Playground On the sample application, i have added reference to Microsoft.Owin.Security.OpenIdConnect and added code to ConfigureAuth in Startup.Auth.cs file. public void

WSO2 Identity Server - How to assign an existing role to a WSO2 IS user?

自闭症网瘾萝莉.ら 提交于 2019-12-01 11:49:02
I am using WSO2 Identity Server 4.1.0. My requirement is to assign an existing role to a user created in the WSO2 default identity store. I have tried the following: Create a user with a role assigned to him: curl -v -k --user admin:admin --data "{"schemas":[],"name":{"familyName":"FN_atest2","givenName":"LN_atest2"},"userName":"atest2","password":"perf","groups":[{"value":"c83dc72c-15c2-40f2-bddd-4acb086b9e17","display":"Employee"}]}" --header "Content-Type:application/json" `https://localhost:9443/wso2/scim/Users` Update the user after it is created: curl -v -k --user admin:admin -X PUT -

WSO2 Identity Server - How to assign an existing role to a WSO2 IS user?

柔情痞子 提交于 2019-12-01 11:43:35
问题 I am using WSO2 Identity Server 4.1.0. My requirement is to assign an existing role to a user created in the WSO2 default identity store. I have tried the following: Create a user with a role assigned to him: curl -v -k --user admin:admin --data "{"schemas":[],"name":{"familyName":"FN_atest2","givenName":"LN_atest2"},"userName":"atest2","password":"perf","groups":[{"value":"c83dc72c-15c2-40f2-bddd-4acb086b9e17","display":"Employee"}]}" --header "Content-Type:application/json" `https:/

wso2 identity server - user self registration

蹲街弑〆低调 提交于 2019-12-01 10:54:13
I'm rewording a question that I previously posted here . The default functionality for WSO2 Identity Server is to allow users to register user accounts for themselves. However, this is undesirable for my company. We only want to allow an administrator to create user accounts. Is it possible to disable the user self registration functionality in wso2 identity server? Yes, you can remove this feature from the WSO2 Identity Server. Go to Configure --> Features --> Installed Features --> Identity Self Registration --> Uninstall --> Restart the server. 来源: https://stackoverflow.com/questions

Is OpenId Connect response_type id_token supported by WSO2 Identity Server 5.0

此生再无相见时 提交于 2019-12-01 10:35:35
I'm trying to implement OpenId Connect in an SPA application with WSO2 Identity Server 5.0.0. I'm trying to use Implicit Flow but I always received an error from the identity server. GET Request: https://idserver:9443/oauth2/authorize?response_type=id_token& client_id=abcd& redirect_uri=https%3A%2F%2Flocalhost%3A44326%2F Error Response: invalid_request, Invalid response_type parameter value Is response_type=id_token supported? Hos With WSO2 Identity Server 5.0.0 OpenID Connect "id_token" response type is not implemented. The "Implicit" settings in the configuration only work for OAuth 2.0

How To Add User Defined Attribute in PIP Attribute User Store

帅比萌擦擦* 提交于 2019-12-01 09:31:31
问题 Hi I am working with WSO2 Balana Xacml 3.0 . I want to add my own attribute called Customer in the attribute store dynamically how to do that. 回答1: You want to add new attribute called "Customer" in to the attribute store? Sorry, Balana does not contain an attribute store. It can contain only the attribute finder modules that would takes to attribute store and retrieve them. You can find the sample implementations of Balana PIP attribute finder module from here. You can see that attribute id

WSO2 identity server email as username

狂风中的少年 提交于 2019-12-01 05:35:10
We are currently evaluating the WSO2 Identity server. We want to use email address as an username. By default the username is 30 characters, it is not long enough. And it must support both . and @ in the username. Is there an way to configure this? The user store is a JDBC(Mysql) one. Thanks Yes.. you can do it.. Step1. Open carbon.xml in IS_HOME/repository/conf and uncomment <EnableEmailUserName>true</EnableEmailUserName> Step2. Open user-mgt.xml in IS_HOME/repository/conf and uncomment JDBC configurations org.wso2.carbon.user.core.jdbc.JDBCUserStoreManager And Comment default LDAP user store

WSO2 identity server email as username

青春壹個敷衍的年華 提交于 2019-12-01 03:20:34
问题 We are currently evaluating the WSO2 Identity server. We want to use email address as an username. By default the username is 30 characters, it is not long enough. And it must support both . and @ in the username. Is there an way to configure this? The user store is a JDBC(Mysql) one. Thanks 回答1: Yes.. you can do it.. Step1. Open carbon.xml in IS_HOME/repository/conf and uncomment <EnableEmailUserName>true</EnableEmailUserName> Step2. Open user-mgt.xml in IS_HOME/repository/conf and uncomment