Comments on How to setup Single Sign On with OTP using simpleSAMLphp and privacyIDEA

How to setup Single Sign On with OTP using simpleSAMLphp and privacyIDEA This howto will deal with Single Sign On to web pages. Maybe you know OpenID. Similar to Kerberos a "Ticket" is granted to the user to authenticate at other services using the ticket and not the credentials anymore. In this howto we will use SAML (Security Assertion Markup Language) which is more sophisticated than the simple OpenID. SAML can be used to setup trust relations between several entities. This is why it is used between companies and organizations, why online service are using it.

3 Comment(s)

Add comment

Please register in our forum first to comment.

Comments

By: bonnie
Reply  

Hi

Thanks for the how to document. Quick question, I have done the privacy idea on one pc running ubuntu 14.04 server and nom am configuring the Simple Samlphp on another machine my problem is i cant seem to get the saml20-idp-hosted.php under the /etc/simplesamlphp/metadata/ location is there somthing am doing wrong any help will be greatly appreciated.

Regards

Bonface

By: Robin Barnwell
Reply  

Hello 

Installed and followed the instructions.  Set-up Wordpress as the service provider and Salesforce and the identity provider.  The login to Salesforce worked fine.  The problem is the redirect back to the Wordpress webpage gives an error and redirects in an endless loop: http://processadvisors.co.uk/wp-login.php?redirect_to=http%3A%2F%2Fprocessadvisors.co.uk%2Fwp-admin%2F&reauth=1  

Where can I find the error log.  Or is this a known issue.  So annoying as I've made the connection and been authenticated but something wrong with Wordpress / PHP.

 

Regards Robin

By: John
Reply  

Comment Date: 09/Feb/2020

The first thing I always do when reading articles like this is to check the publish date (just to get an idea if the instructions are still valid or obsolete depending on the version of the software used in the examples). If publish dates aren't available I check the dates on the comment. It's quite annoying that HTF strips dates from the article. Why would you do that?

This article is at least 4-5 years old.