An open Single Sign On (SSO) solution for the web, a problem also addressed by SAML.

learn more… | top users | synonyms

3
votes
0answers
58 views

What are appropriate measures to only allow logins from a given trusted OpenID-Provider?

I have a bunch of applications, where users need to log in. Not everyone can be a user, each user has to be approved of by an admin. The authentication should be a SSO solution, where user accounts ...
2
votes
0answers
33 views

How is an OpenID Authenticated user Identified?

On a system that I'm working on a user signs up by means of an OpenID/Social Media account (Twitter, Google, Facebook), and then subsequently signs in using that path. The System comprises of a ...
1
vote
0answers
23 views

Oauth authentication without state parameter

I have some security concerns about the first step of account authentication in my application. The authentication goes through an OpenID provider. If the response of such provider shows that the ...
0
votes
0answers
27 views

Do I need my own oauth and/or openid connect provider

I have asked the same question on Server Fault but it possibly fits in better with the IS forum. The system I'm working on will have a mobile application, a web portal and an HTTP-based API. The ...
0
votes
0answers
48 views

Why OpenID Connect instead OAuth 2.0?

My life was very happy when I was using OAuth 2.0 tokens with grant_type=Password. My App flow: User authentication before giving OAuth tokens (AT and RT). Access token validation when user opt for ...
0
votes
0answers
26 views

How does WebID fit in the SAML picture?

How does WebID fit in the SAML picture? Are they related or completely unrelated? Can they work together? If yes, what are the benefits?