Federation

Introduction Security Assertion Markup Language is an open standard for exchanging authenticat...

Introduction SAML is the most complete, secure, and mature solution to get identity federation. ...

Service Provider

Introduction OpenID is an open standard and decentralized authentication protocol.  It allows ...

Introduction OpenID is based on the well known protocol. It is easier to implement and deploy, a...

Identity Provider Service Provider

Introduction The CAS protocol is a simple and powerful ticket-based protocol. It involves one ...

Introduction The CAS is a Single Sign On protocol for the web. This protocol allows users to acc...

Service Provider

Introduction The Radius protocol (Remote Authentication Dial-In User Service) is a networking ...

Introduction Access Reject: The user is unconditionally denied access to all requested net...

Service Provider

 TACACS+ is a security protocol that provides centralized validation of users who are attemptin...

Introduction

Service Provider Information Systems When a Tacacs Service Provider is created, Soffid create...

WS-Federation (Web Services Federation) is an Identity Federation specification WS-Federation ...

Introduction WS-Federation (Web Services Federation) is an Identity Federation specification Si...

Steps Attribute definition First of all, will be mandatory to create two new attributes  Use...

Introduction To configure the Web SSO you must complete the next steps 1. Attribute definitio...

Description The attribute definition page displays all the auto-generated user attributes. Those...

Description After defining the attributes to publish, it’s required to write a policy that defin...

Description Soffid Identity Federation addon helps administrators to manage an Identity Federati...

Description An entity group is just like a folder that allows you to manage different kinds of f...

Description An identity provider (abbreviated IdP or IDP) is a system entity that creates, mai...

Definition The Service Providers are standard applications that rely on Identity Providers to le...

Definition A single identity provider usually offers different profiles or service levels to dif...

Description A profile is a protocol or subset of protocols implemented by the Identity Provider....

Definition The Identity Provider will serve the OpenID-Connect protocol. It is possible to accep...

Definition Based on SAML version 1 standard. This profile is used when the Service Provider want...

Definition Based on SAML version 1 standard. This profile is used when the SSOProfile does not i...

Definition Based on SAML version 1 standard. This profile is used when the Service Provider want...

Definition Based on SAML version 1 standard. This profile is used when the SSOProfile does not i...

Definition The Enhanced Client Profile is used when the Service Provider is not a web applicatio...

Definition This is the most commonly used SAML profile. It allows the IdP to identify users and ...

Definition Cas protocol is rarely used. Screen overview Standard attributes Class: class ...

Definition Networking protocol that authorizes and authenticates users who access a remote netwo...

Step-by-step 1. To deploy the identity provider is advisable to install a dedicated sync server....

There is a service point to allow users change their passwords. Simply redirect the user to: h...

Soffid Identity Provider supports unsolicited login (Idp initiated login) profile. In order to ...

Introduction There are three basic OpenID flows, depending whether the service name must be auth...

Introduction To connect a SAML service provider, the service provider must offer you its SAML me...

Introduction Soffid console has a built-in SAML client, so it can act as a service provider in t...

Introduction SAML 2.0 is a complex and not easy to implement standard. There are some libraries ...

Introduction OpenID-Connect has a clear design suitable for both frontend and backend. SAML has...

Introduction Openid-connect allows a service provider registers dynamically other service provid...

Introduction The CAS protocol is a simple and powerful ticket-based protocol. It involves one or...

Introduction TACACS (Terminal Access Controller Access Control System) is a security protocol th...

Introduction The Radius protocol (Remote Authentication Dial-In User Service) is a networking pr...

Definition This operation allows to validate the user domain and return the IDP ower of the us...

Definition This operation allows to validate the credentials of the user against Soffid. ...

Definition This operation allows to close a session created by either validate-credentials o...

Definition This operation allows to generate a SAML request to an external IDP. URL ...

Definition This operation allows to validate a SAML response generated by another external I...

Definition This operation allows to generate a SAML logout request to be sent to a IdP s...

Introduction An Identity Broker is often part of a a Single Sign-On Architecture as an an inte...

Introduction Soffid federation can be composed by a mix of SAML and oAuth / OpenID-connect ser...