wso2is

wso2 identity server oauth userinfo only returns sub

自闭症网瘾萝莉.ら 提交于 2019-12-01 01:05:40
I have set up SP in wso2 Identity server and was able to get access_token in auth2 using playground. Ref : https://docs.wso2.com/display/IS510/OAuth+2.0+with+WSO2+Playground Then I accessed userinfo endpoint like : curl -k -H "Authorization: Bearer 603b0a91-0354-3b64-90e9-0eb1fdd8f162" https://localhost:9443/oauth2/userinfo?schema=openid I always get JSON : {"sub":"admin@carbon.super"} But there should also be other properties like first name,last name, email ... etc by default. How do I configure server to return all these information? P.S tried IS 5.1 and 5.2 It seems the logic to return

Difference between grant_type=client_credentials and grant_type=password in Authentication Flow?

时光毁灭记忆、已成空白 提交于 2019-12-01 01:03:16
问题 I would like to understand the difference between grant_type=client_credentials and grant_type=password in Authentication or in OAuth2 Flow concept. I am following below sites: http://help.atavist.com/api:authentication http://apiwiki.poken.com/authentication/oauth2 I presume grant_type=password in not secure way as far as using gran_type in JavaScript development. But I still wounder can someone help to understand this concept. I also observe that grant_type=client_credentials doesn't

cannot login to wso2 Identity server with the ldap credentials

馋奶兔 提交于 2019-11-30 21:14:22
问题 I was trying to connect wso2 Identity server to an Ldap ReadWriteLDAPUserStoreManager, succeeded in the integration and could access ldap users from wso2 identity server. But the problem is i cannot login to the Identity server by using ldap username and password. Please help me 回答1: Please try with below configuration <?xml version="1.0" encoding="UTF-8"?><UserStoreManager class="org.wso2.carbon.user.core.ldap.ReadWriteLDAPUserStoreManager"> <Property name="ConnectionName">cn=admin,dc=ds,dc

Why is AccessTokenRequest's PreservedState perpetually null with a resultant CSRF related InvalidRequestException?

╄→尐↘猪︶ㄣ 提交于 2019-11-30 15:39:37
As context, I've been trying to get a fairly simple @SprintBootApplication with an additional @EnableOAuth2Sso annotation integrated with WSO2 Identity Server for quite some time now. In my mind getting this working should be a matter of configuration (as advertised on Spring Cloud Security ) - but I've had no luck thus far. In an effort to understand what is going on I've used my debugger to step through spring-security-oauth2 code to figure out what is going on. In doing so I've noticed that my AccessTokenRequest's PreservedState is perpetually null with a resultant CSRF related

WSO2 identity server api

回眸只為那壹抹淺笑 提交于 2019-11-30 13:59:16
I am designing a new application that needs identity management functionality (i.e. managing user accounts and roles). I would like to delegate that functionality to an Identity Server. Is there a REST or SOAP API's exposed by WSO2 Identity Server for managing user accounts (e.g. similar to OpenAM's REST api )? I did find the WSO2 AuthenticationAdmin wsdl https://localhost:9443/services/AuthenticationAdmin?wsdl but that doesn't have user account management functionality. Is there an authorative list of all the wsdl's that are exposed by the WSO2 platform? So far, I've found the

OAuth 2.0 using Spring Security + WSO2 Identity Server

China☆狼群 提交于 2019-11-30 02:26:00
I'm developing a web application to expose a number of RESTful services secured by OAuth 2.0. Here is the planned architecture: 1- OAuth Authorization Provider: WSO2 Identity Server (IS) 2- OAuth Resource Server: Java web application using the following technologies: Jersey (to implement and expose the web services) Spring Security (to implement the OAuth Resource Server part) I've seen several examples ( ex1 , ex2 , ex3 , etc...) on how to secure RESTful services using WSO2 IS as an authorization server + WSO2 ESB as a resource server. This is NOT what I need in my case. Unfortunately, the

WSO2 identity server api

左心房为你撑大大i 提交于 2019-11-29 19:19:53
问题 I am designing a new application that needs identity management functionality (i.e. managing user accounts and roles). I would like to delegate that functionality to an Identity Server. Is there a REST or SOAP API's exposed by WSO2 Identity Server for managing user accounts (e.g. similar to OpenAM's REST api)? I did find the WSO2 AuthenticationAdmin wsdl https://localhost:9443/services/AuthenticationAdmin?wsdl but that doesn't have user account management functionality. Is there an

Unable to access XACML policy in wso2is-5.6.0 from wso2am-2.5.0 getting error

五迷三道 提交于 2019-11-29 18:03:09
i following link Created XACML policy in wso2is. Accessing from wso2AM created one POST type function. While sending request in wso2AM store getting an error I have update "jndi.properties" file by commenting second "/test" url line. After that i am getting error. ERROR - EntitlementMediator Error occurred while evaluating the policy org.wso2.carbon.identity.entitlement.proxy.exception.EntitlementProxyException: Cannot initialize EntitlementServiceStub with null Axis2 configuration context. at org.wso2.carbon.identity.entitlement.proxy.soap.basicAuth.BasicAuthEntitlementServiceClient

Cannot see any option in WSO2 Identity Server dashboard

送分小仙女□ 提交于 2019-11-29 05:15:57
I'm evaluating WSO2 Identity Server 5.0.0 but I'm getting a strange issue using the dashboard. I installed it on a server of mine (so it is not on localhost) and configured the following configuration files so that WSO2 knows where to point File wso2is-5.0.0/repository/conf/carbon.xml <HostName>SERVER_IP</HostName> <MgtHostName>SERVER_IP</MgtHostName> File wso2is-5.0.0/repository/conf/security/saml2.federation.properties WSO2=https://SERVER_IP:9445/samlsso File wso2is-5.0.0/repository/conf/security/sso-idp-config.xml <SSOIdentityProviderConfig> <ServiceProviders> <ServiceProvider> <Issuer>wso2

Spring SAML integration with WSO2 Identity server, SAML Message ID not reconised

我与影子孤独终老i 提交于 2019-11-29 04:33:50
I have taken the Spring SAML example (see section 4.2 in this guide ) which works with the Open source login page SSO, and tried to add support to use WSO2 Identity Server as an additional IDP service. To do this I changed the spring SAML sample project by adding a metadata xml file for IS, and added an entry for the IS metadata to the securityContext.xml. On running the spring application I now get presented with an option to login using IS, and I can successfully login in on WSO2 when I'm redirected to it. However the spring application throws an exception on the IS SAML response about it