Advanced Search
Search Results
194 total results found
User type resource
/UserType Dictionary table The diagram service model of the object: https://download.soffid.com/doc/console/latest/uml/com/soffid/iam/api/UserType.html Query Schema It is allowed to consult all the User Type definition using the Schema query: Request GET...
GroupUser resource
/GroupUser Dictionary table The diagram service model of the object: https://download.soffid.com/doc/console/latest/uml/com/soffid/iam/api/GroupUser.html Soffid allows you to add customized data to the GroupUser object. You can do that on metadata option: ...
RoleAccount resource
/RoleAccount Dictionary table The diagram service model of the object: https://download.soffid.com/doc/console/latest/uml/com/soffid/iam/api/RoleAccount.html Query Schema It is allowed to consult all the RoleAccount definition using the Schema query: Requ...
Host resource
/Host Dictionary table The diagram service model of the object: https://download.soffid.com/doc/console/latest/uml/com/soffid/iam/api/Host.html Soffid allows you to add customized data to the user object. You can do that on metadata, on the proper object. ...
MailList resource
/MailList Dictionary table The diagram service model of the object: https://download.soffid.com/doc/console/latest/uml/com/soffid/iam/api/MailList.html Soffid allows you to add customized data to the user object. You can do that on metadata, on the proper o...
Recertification policies
Description Soffid allows you to establish some policies to define the scope of the recertification process. Menu option Main Menu > Administration > Configuration > Security settings > Recertification policies Screen overview Custom attributes Name:...
SAML2AttributeQueryProfile
Definition Based on SAML version 1 standard. This profile is used when the SSOProfile does not include attributes statements in the assertion. This profile allows to the applications request user data. When you are configuring the profile, you could define w...
SAML2SSOProfile
Definition This is the most commonly used SAML profile. It allows the IdP to identify users and to give such information to Service Providers. This profile is used to log in. When you are configuring the profile, you could define what data will be encrypted ...
SAML2ArtifactResolutionProfile
Definition Based on SAML version 1 standard. This profile is used when the Service Provider wants to resolve or check a received assertion. The profile configuration settings are quite similar to those present in SAML2SSOProfile. When you are configuring the...
SAML1AttributeQueryProfile
Definition Based on SAML version 1 standard. This profile is used when the SSOProfile does not include attributes statements in the assertion. This profile allows to the applications request user data. When you are configuring the profile, you could define w...
SAML2ECPProfile
Definition The Enhanced Client Profile is used when the Service Provider is not a web application. Nowadays, it is rarely used, as most mobile applications have shifted to OAuth or OpenIDConnect. When you are configuring the profile, you could define what da...
Introduction to Password Recovery
What is Password Recovery? Password recovery is an addon provides by Soffid. This addon allows to the end-users revover their passwords. Soffid provides the funtionality that allows to config the password recovery depending on the bussiness needs and using ...
CAS (Central Authentication Service)
Introduction The CAS protocol is a simple and powerful ticket-based protocol. It involves one or many clients and one server. Clients are embedded in CASified applications (called “CAS services”) whereas the CAS server is a standalone component. The Cas ...
CAS architecture
Introduction The CAS is a Single Sign On protocol for the web. This protocol allows users to access multiple applications by providing their credentials. The response will be a JSON or XML Single Log-in The single log-in is usually initiated by the appl...
OpenID-Connect example
Identity Provider Service Provider
CAS Example
Service Provider
Radius (Remote Authentication Dial-In User Service)
Introduction The Radius protocol (Remote Authentication Dial-In User Service) is a networking protocol that authorizes and authenticates users who access a remote network. https://es.wikipedia.org/wiki/RADIUS
Radius
Definition Networking protocol that authorizes and authenticates users who access a remote network. Screen overview Standard attributes Class: class name (readOnly field). Enabled: if it is checked (selected option is Yes) that protocol will be enable...
CAS
Definition Cas protocol is rarely used. Screen overview Standard attributes Class: class name (readOnly field). Enabled: if it is checked (the selected option is Yes) that protocol will be enabled.
How to perform unsolicited login
Soffid Identity Provider supports unsolicited login (Idp initiated login) profile. In order to enable it, you must be sure that federation metadata for the target service provider allows it. It is configured using the AuthnRequestsSigned attribute of the SPS...