Search Results

Definition Soffid includes Digital certificate functionality as a security enhancement. You could add new Digital certificates, internal or external. If you select the external certificate, you could add a valid certificate to Soffid; If you select the intern...

When making any manual changes to the Sync server configuration files, it will be necessary to copy these changes to the Kubernetes secrets. Command example:  java -cp "/opt/soffid/iam-sync/bin/bootstrap.jar" com.soffid.iam.sync.bootstrap.KubernetesSaver ...

When you install soffid Sync server in kubernetes, a properties file is generated. If this file is not saved in a permanent storage, it could be lost during the Syns Server upgrade process. Here you are the steps to copy your Kube config to a data base table ...

Step-by-step To enable the kerberos authentication method, the identity provider must have a keytab file that enables it to authenticate users. The steps to get it are described below: 1. First of all, you need to create a net user. You can use the old-fashi...

Description A profile is a protocol or subset of protocols implemented by the Identity Provider. There are some accepted protocols, those allows a custom config dependent on the selected profile. The accepted protocols are the following: 1. OpenIDProfile 2...

Introduction Soffid ESSO is a full Enterprise Single Sign on solution. Here you can find the details about the ESSO from 3.3.3-enterprise to 3.4.3-enterprise  iversions nstallation. Supported platforms Soffid ESSO supports Windows XP or later workstations....

Introduction KojiKabuto.exe, the main Soffid ESSO component, picks settings and rules automatically from Soffid synchronization server at login. This configuration can be updated by running the command "KojiKabuto update". Once run, new rules will apply to al...

How to access? When you try to connecto to a Windows machine by using Soffid ESSO, you need to enter your user and password in the Windows login page.  If the user does not exists in this machine, depending on the attribute "Create local accounts when there ...

How to access? When you try to connect to a Linux machine using Soffid ESSO, you will need to enter your username and password on the Linux login page. If the user does not exists in this machine, depending on the attribute "Create local accounts when there ...

What is Soffid Authenticator? Soffid provides an application to be used with Soffid Identity Provider to obtain SSO and MFA for any web or legacy application. It supports one-click push authentication for login. Please note that for push authentication to w...

How to access? For domain member hosts, ESSO will remove all existing local accounts except for those with a dependand service. So, in order to access with administrator privileges, user must use a domain account with local administrator privilege, or either ...

Introduction Soffid provides a collection of add-ons that can be installed to add functionalities to the Soffid Console. There are several Addons available to be installed to add functionalities to the Soffid Console. These add-ons can be found at: http://ww...

What is WSSO for legacy applications? Nowadays, it's very common to have a mix of different technologies and products to deliver information to customers, providers or internal users. With Soffid IAM you can get the same user and password for every applicati...

Installation In order to install Web Single Sign on, the following components must be installed and running Soffid IAM Console version 1.2.1 or later Soffid IAM Synchronization server 1.2.1 or later Soffid SAML Identity Provider version 1.0.0 o...

Web Single Sign On acts introducing credentials to the underlying web application on behalf of the user. To perform its job, WSSO can: Identify the user when needed Modify pages generated by the web application in order to adapt them to the single si...

The system is configured using Apache configuration files, plus some ECMA script files that can be located anywhere you want. If you are using Ubuntu Server, it is necessary remove apache_mpm_worker module and install apache_mpm_prefork one. In general, Soff...

Soffid Federation is based on shibboleth open source project. Actually the installation is a mixed procedure between Shibboleth installation and Soffid configuration. In the future Shibboleth installation will be integrated on Soffid installation in order to a...

Configuring Soffid WSSO The system is configured using Apache configuration files, plus some ECMA script files that can be located anywhere you want. In general, Soffid WSSO acts intercepting and modifying any request made to Apache. This request can be proc...

Scripting language The scripting language is fully compatible with ECMAScript 3rd edition plus a small set of new objects and methods. Before running the script, Soffid WSSO will create some global variables referring to the request of the user agent and con...

Add the following settings to Apache: <Location /> ShibRequireSession off ShibRequestSetting applicationId drupal AuthType shibboleth Require shibboleth </Location> SoffidOnLoadScript .* .* 60000 /etc/apache2/soffid/drupal-login.js SoffidPostData...