Mastodon

0 posts0 participants0 posts today

Chris WysopalThese SAMLStorm vulnerabilities have been public for a couple weeks now. Anyone seeing exploitation in the wild? How’s patching going across vendors and infra? <a href="https://infosec.exchange/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a> <a href="https://infosec.exchange/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> <a href="https://infosec.exchange/tags/NodeJS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#NodeJS</a> <a href="https://infosec.exchange/tags/AppSec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#AppSec</a>

Olly 👾:github: GitHub uncovers new Ruby-SAML Vulnerabilities allowing Account Takeover Attacks.Two high-severity security flaws have been disclosed in the open-source ruby-saml library that could allow malicious actors to bypass Security Assertion Markup Language (SAML) authentication protections.<a href="https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/</a><a href="https://nerdculture.de/tags/github" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#github</a> <a href="https://nerdculture.de/tags/ruby" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ruby</a> <a href="https://nerdculture.de/tags/saml" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#saml</a> <a href="https://nerdculture.de/tags/library" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#library</a> <a href="https://nerdculture.de/tags/it" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#it</a> <a href="https://nerdculture.de/tags/security" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#security</a> <a href="https://nerdculture.de/tags/privacy" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#privacy</a> <a href="https://nerdculture.de/tags/engineer" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#engineer</a> <a href="https://nerdculture.de/tags/media" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#media</a> <a href="https://nerdculture.de/tags/programming" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#programming</a> <a href="https://nerdculture.de/tags/tech" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#tech</a> <a href="https://nerdculture.de/tags/news" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#news</a>

sekurak NewsGitLab naprawia podatności związane z biblioteką ruby-samlGitLab ogłosił wydanie nowych wersji oprogramowania. Aktualizacja dotyczy zarówno Community Edition, jak i Enterprise Edition. Poprawione wersje to  17.9.2, 17.8.5 oraz 17.7.7. Najważniejsza poprawka dotyczy dwóch podatności (CVE-2025-25291, CVE-2025-25292), zgłoszonych w bibliotece ruby-saml, która jest wykorzystywana przez GitLab do SAML SSO (security assertion markup language; single sign-on). W pewnych okolicznościach...<a href="https://mastodon.com.pl/tags/WBiegu" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WBiegu</a> <a href="https://mastodon.com.pl/tags/Cve" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cve</a> <a href="https://mastodon.com.pl/tags/Gitlab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Gitlab</a> <a href="https://mastodon.com.pl/tags/Graphql" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Graphql</a> <a href="https://mastodon.com.pl/tags/Podatno%C5%9Bci" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Podatności</a> <a href="https://mastodon.com.pl/tags/Rce" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rce</a> <a href="https://mastodon.com.pl/tags/Ruby" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Ruby</a> <a href="https://mastodon.com.pl/tags/Saml" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Saml</a><a href="https://sekurak.pl/gitlab-naprawia-podatnosci-zwiazane-z-biblioteka-ruby-saml/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://sekurak.pl/gitlab-naprawia-podatnosci-zwiazane-z-biblioteka-ruby-saml/</a>

alephWir haben auf die Mastodon Version 4.3.6 upgedated. Dies beinhaltet wichtige Sicherheitskorrekturen für alle, die SAML Single-Sign-On verwenden. Bitte weiter tooten :mastodon:<a href="https://github.com/mastodon/mastodon/releases/tag/v4.3.6" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/mastodon/mastodon/releases/tag/v4.3.6</a><a href="https://afterspace.rocks/tags/MastoAdmin" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MastoAdmin</a> <a href="https://afterspace.rocks/tags/MastoUpdate" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MastoUpdate</a> <a href="https://afterspace.rocks/tags/Afterspace" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Afterspace</a> <a href="https://afterspace.rocks/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a>

:mastodon: decioDeux vulnérabilités (CVE-2025-25291, CVE-2025-25292) permettent de contourner l’authentification SAML (SSO) sur GitHub et GitLab via une attaque par « signature wrapping ». Un attaquant disposant d'une signature valide pourrait ainsi se connecter sous l’identité d’un autre utilisateur. La prudence est de mise, surtout qu’un gang spécialisé dans les ransomwares a récemment ciblé ces plateformes. L’exploitation active est à ce jour inconnue.📌 GitLab recommande fortement la mise à jour vers 17.9.2 : 👇 <a href="https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/</a>📌 GitHub – Sign in as anyone (détails techniques) : 👇 <a href="https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/</a><a href="https://infosec.exchange/tags/Cyberveille" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cyberveille</a> <a href="https://infosec.exchange/tags/vulnerabilite" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#vulnerabilite</a> <a href="https://infosec.exchange/tags/GitHub" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GitHub</a> <a href="https://infosec.exchange/tags/GitLab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#GitLab</a> <a href="https://infosec.exchange/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> <a href="https://infosec.exchange/tags/CVE_2025_25291" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE_2025_25291</a> <a href="https://infosec.exchange/tags/CVE_2025_25292" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CVE_2025_25292</a>

FrehiIf you run <a href="https://fosstodon.org/tags/gitlab" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#gitlab</a> with <a href="https://fosstodon.org/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> authentication, you better upgrade as soon as possible<a href="https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://about.gitlab.com/releases/2025/03/12/patch-release-gitlab-17-9-2-released/</a><a href="https://fosstodon.org/tags/infosec" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#infosec</a>

Worteks🎙️ Nous avons eu le plaisir de participer aujourd'hui à l'enregistrement d'un épisode du Podcast "Tout est sous CTRL" produit par nos amis de Centreon.Interviewé par Vincent Untz , <a href="https://framapiaf.org/@clementoudot" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@clementoudot</a> est venu parler de gestion des identités et des accès (IAM), d'authentification mutli-facteurs (2FA/MFA) et de PasswordLess, mais surtout d'Open Source !<a href="https://fosstodon.org/@ow2" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ow2</a> <a href="https://mastodon.social/@opensource_experts" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@opensource_experts</a> <a href="https://mastodon.social/@fsfe" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@fsfe</a> <a href="https://mastodon.social/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://mastodon.social/tags/IAM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IAM</a> <a href="https://mastodon.social/tags/FreeSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FreeSoftware</a> <a href="https://mastodon.social/tags/2FA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#2FA</a> <a href="https://mastodon.social/tags/MFA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#MFA</a> <a href="https://mastodon.social/tags/PasswordLess" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#PasswordLess</a> <a href="https://mastodon.social/tags/IGA" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IGA</a> <a href="https://mastodon.social/tags/LDAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LDAP</a> <a href="https://mastodon.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://mastodon.social/tags/WebSSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebSSO</a> <a href="https://mastodon.social/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> <a href="https://mastodon.social/tags/OpenIDConnect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenIDConnect</a>

hikariUSSO is a third-party cookie-based SSO (for now), built to work across multiple domains and businesses. It has been in development for over a year by Mahdi Kiani.Right now, it's written in Python, but a Go rewrite is coming soon. After the rewrite, OAuth, SAML, and other authentication methods will be added.For now, USSO doesn’t have a frontend to manage all SSO operations, but everything is available through an API.A couple of microservices also work with USSO:A global S3-based file managerUFAAS, a Function-as-a-Service platform, optimized for IranUFAAS currently only supports IRT/IRR currencies and integrates with Iranian payment gateways, but accounts can also be manually charged.A Rust module for USSO has also been released, making it easier to integrate with Rust-based applications. Additionally, I've recently joined the development team.USSO is planned to be used on Parch Linux, and detailed deployment documentation will be written for all major platforms, including cloud, Docker, Kubernetes, and Jails.Mahdi Kiani on X: <a href="https://x.com/mahdikiani" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://x.com/mahdikiani</a> Project GitHub: <a href="https://github.com/ussoio" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/ussoio</a> The File Manager: <a href="https://github.com/ufilesorg" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/ufilesorg</a> FaaS: <a href="https://github.com/ufaasio" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/ufaasio</a> profile manager based on usso: <a href="https://github.com/uprofile" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/uprofile</a> rustcrate: <a href="https://crates.io/crates/usso" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://crates.io/crates/usso</a><a href="https://mastodon.bsd.cafe/tags/USSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#USSO</a> <a href="https://mastodon.bsd.cafe/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://mastodon.bsd.cafe/tags/OAuth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OAuth</a> <a href="https://mastodon.bsd.cafe/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> <a href="https://mastodon.bsd.cafe/tags/FaaS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FaaS</a> <a href="https://mastodon.bsd.cafe/tags/Rust" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Rust</a> <a href="https://mastodon.bsd.cafe/tags/Python" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Python</a> <a href="https://mastodon.bsd.cafe/tags/Go" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Go</a> <a href="https://mastodon.bsd.cafe/tags/ParchLinux" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#ParchLinux</a> <a href="https://mastodon.bsd.cafe/tags/Cloud" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Cloud</a> <a href="https://mastodon.bsd.cafe/tags/Docker" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Docker</a> <a href="https://mastodon.bsd.cafe/tags/Kubernetes" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Kubernetes</a> <a href="https://mastodon.bsd.cafe/tags/Microservices" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Microservices</a> <a href="https://mastodon.bsd.cafe/tags/FileManager" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FileManager</a> <a href="https://mastodon.bsd.cafe/tags/UFAAS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UFAAS</a> <a href="https://mastodon.bsd.cafe/tags/TechDevelopment" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#TechDevelopment</a> <a href="https://mastodon.bsd.cafe/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a>

LemonLDAP::NG✨ LemonLDAP::NG 2.20.2 has been released!🔗 <a href="https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-20-2-is-out/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-20-2-is-out/</a>⚠ This version includes some security fixes<a href="https://fosstodon.org/tags/IAM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IAM</a> <a href="https://fosstodon.org/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://fosstodon.org/tags/lemonldap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lemonldap</a> <a href="https://fosstodon.org/tags/lemonldapng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lemonldapng</a> <a href="https://fosstodon.org/tags/CAS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CAS</a> <a href="https://fosstodon.org/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> <a href="https://fosstodon.org/tags/OpenIDConnect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenIDConnect</a> <a href="https://fosstodon.org/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://fosstodon.org/tags/FreeSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FreeSoftware</a> <a href="https://fosstodon.org/tags/Perl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Perl</a><a href="https://fosstodon.org/@ow2" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ow2</a> <a href="https://fosstodon.org/@PerlRakuFoundation" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@PerlRakuFoundation</a> <a href="https://chirp.social/@Perl" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@Perl</a>

Kushal Das :python: :tor:One day I will learn enough about <a href="https://toots.dgplug.org/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a>

Neustradamus :xmpp: :linux:<a href="https://mastodon.social/tags/LemonLDAPNG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LemonLDAPNG</a> 2.16.4 (<a href="https://mastodon.social/tags/LTS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LTS</a>) has been released (<a href="https://mastodon.social/tags/LemonLDAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LemonLDAP</a> / <a href="https://mastodon.social/tags/LDAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LDAP</a> / <a href="https://mastodon.social/tags/LightweightDirectoryAccessProtocol" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LightweightDirectoryAccessProtocol</a> / <a href="https://mastodon.social/tags/WebSSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebSSO</a> / <a href="https://mastodon.social/tags/SingleSignOn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SingleSignOn</a> / <a href="https://mastodon.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> / <a href="https://mastodon.social/tags/OpenIDConnect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenIDConnect</a> / <a href="https://mastodon.social/tags/CAS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CAS</a> / <a href="https://mastodon.social/tags/OAuth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OAuth</a> / <a href="https://mastodon.social/tags/OpenID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenID</a> / <a href="https://mastodon.social/tags/REST" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#REST</a> / <a href="https://mastodon.social/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> / <a href="https://mastodon.social/tags/SOAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOAP</a>) <a href="https://lemonldap-ng.org/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://lemonldap-ng.org/</a>

Neustradamus :xmpp: :linux:<a href="https://mastodon.social/tags/LemonLDAPNG" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LemonLDAPNG</a> 2.20.1 has been released (<a href="https://mastodon.social/tags/LemonLDAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LemonLDAP</a> / <a href="https://mastodon.social/tags/LDAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LDAP</a> / <a href="https://mastodon.social/tags/LightweightDirectoryAccessProtocol" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#LightweightDirectoryAccessProtocol</a> / <a href="https://mastodon.social/tags/WebSSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#WebSSO</a> / <a href="https://mastodon.social/tags/SingleSignOn" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SingleSignOn</a> / <a href="https://mastodon.social/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> / <a href="https://mastodon.social/tags/OpenIDConnect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenIDConnect</a> / <a href="https://mastodon.social/tags/CAS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CAS</a> / <a href="https://mastodon.social/tags/OAuth" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OAuth</a> / <a href="https://mastodon.social/tags/OpenID" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenID</a> / <a href="https://mastodon.social/tags/REST" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#REST</a> / <a href="https://mastodon.social/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> / <a href="https://mastodon.social/tags/SOAP" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SOAP</a>) <a href="https://lemonldap-ng.org/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://lemonldap-ng.org/</a>

bertrand 🏃 👨‍💻 🎸<a href="https://toot.berlin/@blindcoder" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@blindcoder</a> agreed! I'll tell my 2005 self right away! ... Oh wait... <a href="https://piaille.fr/tags/saml" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#saml</a> <a href="https://piaille.fr/tags/saml2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#saml2</a> <a href="https://piaille.fr/tags/idm" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#idm</a> <a href="https://piaille.fr/tags/IAM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IAM</a>

BenjaminCould we please, please, PLEASE agree on /.well-known/saml/metadata.xml ? Yes?<a href="https://toot.berlin/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> <a href="https://toot.berlin/tags/SAML2" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML2</a> <a href="https://toot.berlin/tags/IDM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IDM</a> <a href="https://toot.berlin/tags/IAM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IAM</a>

Silke MeyerIn Eurem UCS läuft nach der Keycloak-Anbindung die Portal-Session ständig ab? Jeder Client kann in Keycloak eine eigene Session Lifetime haben, unabhängig von den globalen Token Lifetime im Realm.So stellt Ihr 10 Stunden ein:univention-keycloak saml/sp update <a href="https://portal.example.org/univention/saml/metadata" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://portal.example.org/univention/saml/metadata</a> '{"attributes": {"saml.assertion.lifespan": "36000"}}'In der Oberfläche: Clients -> Portal -> Reiter "Erweitert" -> Runterscrollen -> "Assertion Lifespan".<a href="https://univention.social/tags/UCS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UCS</a> <a href="https://univention.social/tags/UCSschool" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#UCSschool</a> <a href="https://univention.social/tags/singlesignon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#singlesignon</a> <a href="https://univention.social/tags/nubus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nubus</a> <a href="https://univention.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://univention.social/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a>

LemonLDAP::NG✨ LemonLDAP::NG 2.20.1 has been released!🔗 <a href="https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-20-1-is-out/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://projects.ow2.org/view/lemonldap-ng/lemonldap-ng-2-20-1-is-out/</a>⚠ This version includes some security fixes<a href="https://fosstodon.org/tags/IAM" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#IAM</a> <a href="https://fosstodon.org/tags/SSO" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SSO</a> <a href="https://fosstodon.org/tags/lemonldap" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lemonldap</a> <a href="https://fosstodon.org/tags/lemonldapng" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#lemonldapng</a> <a href="https://fosstodon.org/tags/CAS" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#CAS</a> <a href="https://fosstodon.org/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> <a href="https://fosstodon.org/tags/OpenIDConnect" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenIDConnect</a> <a href="https://fosstodon.org/tags/OpenSource" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#OpenSource</a> <a href="https://fosstodon.org/tags/FreeSoftware" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#FreeSoftware</a> <a href="https://fosstodon.org/tags/Perl" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Perl</a><a href="https://fosstodon.org/@ow2" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@ow2</a> @Perl

Silke MeyerAt the last <a href="https://univention.social/@univention" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@univention</a> summit I gave an introduction to the Keycloak app in Nubus. You missed it? There is a blog post now:Navigating the Keycloak Admin Console with Nubus: A Step-by-Step Introduction<a href="https://www.univention.com/blog-en/2024/10/navigating-the-keycloak-admin-console/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.univention.com/blog-en/2024/10/navigating-the-keycloak-admin-console/</a><a href="https://univention.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://univention.social/tags/nubus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nubus</a> <a href="https://univention.social/tags/univention" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#univention</a> <a href="https://univention.social/tags/singlesignon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#singlesignon</a> <a href="https://univention.social/tags/oidc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#oidc</a> <a href="https://univention.social/tags/saml" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#saml</a>

Silke MeyerAuf dem <a href="https://univention.social/@univention" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@univention</a> Summit hatte ich eine Einführung in die Bedienung der Keycloak-App auf Nubus gegeben. Das habe ich nun nochmal verbloggt, für alle, die es gerne nachlesen möchten:Keycloak Admin Console mit Nubus: Der Einstieg leichtgemacht<a href="https://www.univention.de/blog-de/2024/10/keycloak-admin-console/" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://www.univention.de/blog-de/2024/10/keycloak-admin-console/</a><a href="https://univention.social/tags/keycloak" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#keycloak</a> <a href="https://univention.social/tags/nubus" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#nubus</a> <a href="https://univention.social/tags/univention" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#univention</a> <a href="https://univention.social/@univention" class="u-url mention" rel="nofollow noopener noreferrer" target="_blank">@univention</a> <a href="https://univention.social/tags/singlesignon" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#singlesignon</a> <a href="https://univention.social/tags/oidc" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#oidc</a> <a href="https://univention.social/tags/saml" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#saml</a>

pelzviehDas Sams, äh <a href="https://mastodon.flying-snail.de/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> lebt wieder: <a href="https://github.com/mastodon/mastodon/issues/32362" rel="nofollow noopener noreferrer" translate="no" target="_blank">https://github.com/mastodon/mastodon/issues/32362</a>Du musst die PEM-encoded values jetzt ganz normal multi-line mit magischen BEGIN und END-Zeilen schreiben.

pelzviehHm. Das Update hat meinen <a href="https://mastodon.flying-snail.de/tags/SAML" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#SAML</a> <a href="https://mastodon.flying-snail.de/tags/Login" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#Login</a> getötet 😞

Recent searches

Search options

Administered by:

Server stats:

#saml