OSP and ADFS

[sjoerdk]

Hi,

When will OSP be supporting ADFS. More and more customers want the
Identity Applications linked to ADFS and the only thing I can 'offer'
them is a Kerberos fallback for SSO (or NAM which isn't the greatest
advice if they don't use it yet). Any chance of ADFS support in the near
future ?


--
Sjoerdk
------------------------------------------------------------------------
Sjoerdk's Profile: https://forums.netiq.com/member.php?userid=1135
View this thread: https://forums.netiq.com/showthread.php?t=55995

[geoffc]

On 6/8/2016 3:54 AM, Sjoerdk wrote:
>
> Hi,
>
> When will OSP be supporting ADFS. More and more customers want the
> Identity Applications linked to ADFS and the only thing I can 'offer'
> them is a Kerberos fallback for SSO (or NAM which isn't the greatest
> advice if they don't use it yet). Any chance of ADFS support in the near
> future ?

Have you tried SAML federation of OSP to ADFS? That would be the
obvious choice.

[sjoerdk]

geoffc;268521 Wrote:
>
> Have you tried SAML federation of OSP to ADFS? That would be the
> obvious choice.

I was not able to get the federation working unfortunately. The error I
got was:

>
> System.Xml.XmlException: ID4263: The SAML NameIdentifier
> 'https://idm.customer.nl:8443/osp/a/idm/auth/saml2/metadata' is of
> format 'urn:oasis:names:tc:SAML:2.0:nameid-format:entity' and
> NameQualifier/SPNameQualifier/SPProvidedID is not omitted.
>

There seems to be a difference in SAML 2.0 implementation between ADFS
and OSP.
Use case for this customer is that people authenticate using their AD
account followed by SSO into the Identity Applications.

PS: Sorry that I missed your reply. I have subscription turned on for
this topic, but got no notification....


--
Sjoerdk
------------------------------------------------------------------------
Sjoerdk's Profile: https://forums.netiq.com/member.php?userid=1135
View this thread: https://forums.netiq.com/showthread.php?t=55995

[DDiaz88]

I've come across this same issue and have reported it to the appropriate team.

[sam41 · Accepted solution]

Hi
I'm trying to integrate OSP with ADFS.
Got the same error message. Wondering if you got any solution?

Thanks