Release Joris Beckers
|
|
- Tiffany Pope
- 5 years ago
- Views:
Transcription
1 django a uth a dfsdocumentation Release Joris Beckers Sep 14, 2017
2
3 Contents 1 Features 3 2 Contents Installation Requirements Package installation Setting up django Settings AUDIENCE AUTHORIZE_PATH CA_BUNDLE BOOLEAN_CLAIM_MAPPING CLAIM_MAPPING CLIENT_ID CERT_MAX_AGE GROUP_CLAIM LOGIN_EXEMPT_URLS LOGIN_REDIRECT_URL ISSUER REDIR_URI RESOURCE SIGNING_CERT SERVER TOKEN_PATH USERNAME_CLAIM ADFS Configuration Guide Step 1 - Configuring a Relying Party Trust Step 2 - Configuring Claims Step 3 - Add an ADFS client Step 4 - Determine configuration settings Extras Middleware Context processor Troubleshooting ADFS OAuth2 flow Contributing i
4 ii Get Started! Types of Contributions Changelog
5 A Django authentication backend for Microsoft ADFS 3.0 Free software: BSD License Homepage: Documentation: Contents 1
6 2 Contents
7 CHAPTER 1 Features Integrates Django with Active Directory through Microsoft ADFS 3.0 by using OAuth2. Provides seamless single sign on (SSO) for your Django project on intranet environments. Auto creates users and adds them to Django groups based on info in JWT claims received from ADFS. 3
8 4 Chapter 1. Features
9 CHAPTER 2 Contents Installation Requirements This package has been tested on the following Python versions: And with the following Django versions: You will also need the following: A properly configured Microsoft Windows server with the ADFS 3.0 role installed. A root CA bundle containing the root CA that signed the webserver certificate of your ADFS server. Package installation Python package: pip install django-auth-adfs 5
10 Setting up django In your project s settings.py AUTHENTICATION_BACKENDS = ( 'django_auth_adfs.backend.adfsbackend', ) INSTALLED_APPS = ( # Needed for the ADFS redirect URI to function 'django_auth_adfs', # checkout config.py for more settings AUTH_ADFS = { "SERVER": "adfs.yourcompany.com", "CLIENT_ID": "your-configured-client-id", "RESOURCE": "your-adfs-rpt-name", # Make sure to read the documentation about the AUDIENCE setting # when you configured the identifier as a URL! "AUDIENCE": "microsoft:identityserver:your-relyingpartytrust-identifier", "ISSUER": " "CA_BUNDLE": "/path/to/ca-bundle.pem", "CLAIM_MAPPING": {"first_name": "given_name", "last_name": "family_name", " ": " "}, "BOOLEAN_CLAIM_MAPPING": {"is_staff": "user_is_staff", "is_superuser": "user_is_superuser"}, "REDIR_URI": " } ######################## # OPTIONAL SETTINGS ######################## TEMPLATES = [ { 'OPTIONS': { 'context_processors': [ # Only needed if you want to use the variable ADFS_AUTH_URL in your templates 'django_auth_adfs.context_processors.adfs_url', ], }, }, ] MIDDLEWARE = ( # With this you can force a user to login without using # decorator for every view function # # You can specify URLs for which login is not forced by # specifying them in LOGIN_EXEMPT_URLS in setting.py. 6 Chapter 2. Contents
11 ) # The values in LOGIN_EXEMPT_URLS are interpreted as regular expressions. 'django_auth_adfs.middleware.loginrequiredmiddleware', # Or, when using django <1.10 MIDDLEWARE_CLASSES = ( 'django_auth_adfs.middleware.loginrequiredmiddleware', ) In your project s urls.py urlpatterns = [ # Needed for the redirect URL to function url(r'^oauth2/', include('django_auth_adfs.urls')), # If you're using Django 1.8, this code should be used instead url(r'^oauth2/', include('django_auth_adfs.urls', namespace='django_auth_adfs')), ] The URL you have to configure as the redirect URL in ADFS depends on the url pattern you configure. In the example above you have to make the redirect url in ADFS point to Settings AUDIENCE Default: None Set this to the value of the aud claim your ADFS server sends back in the JWT token. If you leave this set to None this claim will not be verified. You can lookup this value by executing the powershell command Get-AdfsRelyingPartyTrust on the ADFS server and taking the Identifier value. But beware, it doesn t match exactly if it s not a URL. Examples Relying Party Trust identifier your-relyingpartytrust-identifier aud claim value microsoft:identityserver:your-relyingpartytrust-identifier AUTHORIZE_PATH Default: /adfs/oauth2/authorize The path to the authorize page off your ADFS server. Users have to visit this page to receive an authorization code. This value is appended to the server FQDN and used to build the full authorization URL. This URL is available as the variable ADFS_AUTH_URL inside templates when using the django-auth-adfs context processor adfs_url. The default value matches the default for ADFS Settings 7
12 CA_BUNDLE Default: True The value of this setting is passed to the call to the Requests package when fetching the access token from ADFS. It allows you to control the webserver certificate verification of the ADFS server. True makes it use the default CA bundle of your system. False disables the certificate check. /path/to/ca-bundle.pem allows you to specify a path to a CA bundle file. Have a look at the Requests documentation for more details. BOOLEAN_CLAIM_MAPPING Default: None A dictionary of claim/field mappings that is used to set boolean fields of the user account in Django. The key represents user model field (e.g. given_name). first_name) and the value represents the claim short name (e.g. If the value is any of y, yes, t, true, on, 1, the field will be set to True. All other values, or the absence of the claim, will result in a value of False example AUTH_ADFS = { "BOOLEAN_CLAIM_MAPPING": {"is_staff": "user_is_staff", "is_superuser": "user_is_superuser"}, } Note: You can find the short name for the claims you configure in the ADFS management console underneath ADFS Service Claim Descriptions CLAIM_MAPPING Default: None A dictionary of claim/field mappings that will be used to populate the user account in Django. The user s details will be set according to this setting upon each login. The key represents user model field (e.g. given_name). example AUTH_ADFS = { "CLAIM_MAPPING": {"first_name": "given_name", "last_name": "family_name", " ": " "}, } first_name) and the value represents the claim short name (e.g. 8 Chapter 2. Contents
13 Note: You can find the short name for the claims you configure in the ADFS management console underneath ADFS Service Claim Descriptions CLIENT_ID Required Set this to the value you configured on your ADFS server as ClientId when executing the Add-AdfsClient command. You can lookup this value by executing the powershell command Get-AdfsClient on the ADFS server and taking the ClientId value. CERT_MAX_AGE Default: 24 The number of hours the ADFS token signing certificate is cached. This timer gets started the first time someone logs in using a ADFS JWT token because only then the backend class is loaded for the first time. Note: This setting is related with the SIGNING_CERT setting. GROUP_CLAIM Default group Name of the claim sent in the JWT token from ADFS that contains the groups the user is member of. If an entry in this claim matches a group configured in Django, the user will join it automatically. If the returned claim is empty, or the setting is set to None, users are not joined to any group. Important: User s group membership in Django will be reset to math this claim s value. If there s no value, the user will end up being member of no groups. Note: You can find the short name for the claims you configure in the ADFS management console underneath ADFS Service Claim Descriptions LOGIN_EXEMPT_URLS Default: None When you activate the LoginRequiredMiddleware middleware, by default every page will redirect an unauthenticated user to the page configured in the Django setting LOGIN_URL. If you have pages that should not trigger this redirect, add them to this setting as a list value. Every item it the list is interpreted as a regular expression Settings 9
14 LOGIN_REDIRECT_URL Default: None The URL users are redirected to when their authentication is successful. Because we redirect users to and from the ADFS server, we can t pass along a parameters telling us what page the user tried accessing before he got redirected. Thet s why we redirect to a fixed page. If you leave this set to None, the Django setting named LOGIN_REDIRECT_URL will be used instead. ISSUER Default: None Set this to the value of the iss claim your ADFS server sends back in the JWT token. Usually this is something like If you leave this set to None this claim will not be verified. You can lookup this value by executing the powershell command Get-AdfsProperties on the ADFS server and taking the Identifier value. Important: The issuer isn t necessarily the same as the URL of your ADFS server. It usually starts with HTTP instead of HTTPS REDIR_URI Required Sets the redirect uri configured for your client id in ADFS. Because we need this value in a context without access to a Django request object, it needs to be explicitly configured. You can lookup this value by executing the powershell command Get-AdfsClient on the ADFS server and taking the RedirectUri value (without the {} brackets). Important: Make sure both this setting and the setting on your ADFS server matches with the url pattern configured in your urls.py file. See the install documentation for more details. RESOURCE Required Set this to the Relying party trust identifier value of the Relying Party Trust you configured in ADFS. You can lookup this value by executing the powershell command Get-AdfsRelyingPartyTrust on the ADFS server and taking the Identifier value. 10 Chapter 2. Contents
15 SIGNING_CERT Default: True Can be one of the following values: True for autoloading the certificate from the FederationMetadata.xml file on the ADFS server. The base64 PEM representation of the Token Signing Certificate configured in your ADFS server. The path to a certificate file in base64 PEM format. The default value allows you to automatically load new certificates when they get changed on the ADFS server. For more details see the AutoCertificateRollover setting of your ADFS server. Note: This setting is related with the CERT_MAX_AGE setting. SERVER Required Default: None The FQDN of the ADFS server you want users to authenticate against. TOKEN_PATH Default: /adfs/oauth2/token This is the path to the token page of your ADFS server. The authentication backend will try to fetch the access token by submitting the authorization code to this page. USERNAME_CLAIM Default: winaccountname Name of the claim sent in the JWT token from ADFS that contains the username. If the user doesn t exist yet, this field will be used as it s username. Note: You can find the short name for the claims you configure in the ADFS management console underneath ADFS Service Claim Descriptions ADFS Configuration Guide Getting this module to work is sometimes not so straight forward. If your not familiar with JWT tokens or ADFS itself, it might take some tries to get all settings right. This guide tries to given a very basic overview of how to configure ADFS and how to determine the settings for django-auth-adfs. Installing and configuring the basics of ADFS is not in scope. ADFS server: Web server: ADFS Configuration Guide 11
16 Step 1 - Configuring a Relying Party Trust From the AD FS Management screen, go to AD FS Trust Relationships Relying Party Trusts and click Add Relying Party Trust Click Start 12 Chapter 2. Contents
17 Select Enter data about the relying party manually and click Next Enter a display name for the relying party and click Next ADFS Configuration Guide 13
18 Select AD FS profile and click Next Leave everything empty click Next 14 Chapter 2. Contents
19 We don t need WS-Federation or SAML support so leave everything empty again and click Next Enter a relying party trust identifier and click add. The identifier can be anything but beware, there s a difference between entering a URL and something else. For more details see the example section of the AUDIENCE setting. Note: This is the value for the AUDIENCE and the RESOURCE settings ADFS Configuration Guide 15
20 Select I do not want to configure and click Next. Select Permit all users to access the relying party and click Next. 16 Chapter 2. Contents
21 Keep everything default and click Next. Select Open the Edit Claim Rules dialog and click Close 2.3. ADFS Configuration Guide 17
22 Step 2 - Configuring Claims If you selected Open the Edit Claim Rules dialog while adding a relying party, this screen will open automatically. Else you can open it by right clicking the relying party in the list and select Edit Claim Rules On the Issuance Transform Rules tab, click the Add Rule button Select Send LDAP Attributes as Claims and click Next 18 Chapter 2. Contents
23 Give the rule a name and select Active Directory as the attribute store. Then configure the below claims. LDAP Attribute Outgoing Claim Type -Addresses Address Given-Name Given Name Surname Surname Token-Groups - Unqualified Names Group SAM-Account-Name Windows Account Name Click OK to save the settings Note: The Outgoing Claim Type is what will be visible in the JWT Access Token. The first 3 claims will go into the CLAIM_MAPPING setting. The 4th is the GROUP_CLAIM setting. The 5th is the USERNAME_CLAIM setting. You cannot just copy the name from this screen. The name of the claim as visible in the JWT token is the short name which you can lookup in the AD FS Management screen underneath AD FS Service Claim Descriptions 2.3. ADFS Configuration Guide 19
24 You should now see the rule added. Click OK to save the settings. Step 3 - Add an ADFS client While the previous steps could be done via the GUI, the next step needs to be performed via PowerShell. Pick a value for the following fields. Name Name ClientId RedirectUri Example value Django Website OAuth2 Client django_website.adfs.client_id Now execute the following command from a powershell console. PS C:\Users\Administrator> Add-ADFSClient -Name "Django Website OAuth2 Client" - ClientId "django_website.adfs.client_id" -RedirectUri " oauth2/login" The ClientId value will be the CLIENT_ID setting and the RedirectUri value will be the REDIR_URI setting. Step 4 - Determine configuration settings Once everything is configured, you can use the below PowerShell commands to determine the value for the settings of this package. The ## ## pieces were added to indicate with what setting the value corresponds with. PS C:\Users\Administrator> Get-AdfsClient -Name "Django Website OAuth2 Client" Select RedirectUri,ClientId Format-List ## REDIR_URI ## RedirectUri : { ## CLIENT_ID ## ClientId : django_website.adfs.client_id PS C:\Users\Administrator> Get-AdfsProperties select Hostname,Identifier Format- List ## SERVER ## HostName : adfs.example.com ## ISSUER ## Identifier : PS C:\Users\Administrator> Get-AdfsRelyingPartyTrust -Name "Django Website" Select Identifier,IssuanceTransformRules Format-List ## RESOURCE ## ## AUDIENCE ## Identifier : {django_website.adfs.identifier} ## CLAIM_MAPPING ## ## GROUP_CLAIM ## ## USERNAME_CLAIM ## IssuanceTransformRules = = "LDAP attribute claims" c:[type == " claims/windowsaccountname", 20 Chapter 2. Contents
25 Issuer == "AD AUTHORITY"] => issue(store = "Active Directory", types = (" address", " givenname", " surname", " " windowsaccountname"), query = ";mail,givenname,sn,tokengroups,samaccountname;{0}", param = c.value); If you followed this guide, you should end up with a configuration like this. AUTH_ADFS = { "SERVER": "adfs.example.com", "CLIENT_ID": "django_website.adfs.client_id", "RESOURCE": "django_website.adfs.identifier", "AUDIENCE": "microsoft:identityserver:django_website.adfs.identifier", "ISSUER": " "CA_BUNDLE": False, "CLAIM_MAPPING": {"first_name": "given_name", "last_name": "family_name", " ": " "}, "USERNAME_CLAIM": "winaccountname", "GROUP_CLAIM": "group" "REDIR_URI": " } Extras Middleware django-auth-adfs ships with a middleware class named LoginRequiredMiddleware. You can use it to force an unauthenticated user to be redirected to the page defined in the LOGIN_PAGE setting in settings.py without having to add code to every view. By default it s disabled for the page defined in the LOGIN_URL setting and the redirect page for ADFS. But by setting the LOGIN_EXEMPT_URLS setting, you can exclude other pages from authentication. Have a look at the configuration documentation for more information. To enable the middleware, add it to MIDLEWARE in settings.py (or MIDDLEWARE_CLASSES if using Django <1.10. make sure to add it after any other session or authentication middleware to be sure all other methods of identifying the user are tried first. In your settings.py file, add the following: MIDDLEWARE = ( 'django_auth_adfs.middleware.loginrequiredmiddleware', ) AUTH_ADFS = { 2.4. Extras 21
26 } "LOGIN_EXEMPT_URLS": ["api/", "public/"], Context processor This context processor allows you to use the login URL of your ADFS server as a variable inside your templates. This can be used for example to provide a login link. First, in your settings.py file, add the following: TEMPLATES = [ { 'OPTIONS': { 'context_processors': [ # Only needed if you want to use the variable ADFS_AUTH_URL in your templates 'django_auth_adfs.context_processors.adfs_url', ], }, }, ] Then, inside a template you can point to this variable like so: <a href="{{ ADFS_AUTH_URL }}">Click here to log in</a> Troubleshooting If you run into any problems, you can set the logging level in Django to DEBUG. You can do this by adding the configuration below to your settings.py You can see this logging in your console, or in you webserver log if you re using something like Apache with mod_wsgi. More details about logging in Django can be found in the official Django documentation LOGGING = { 'version': 1, 'disable_existing_loggers': False, 'formatters': { 'verbose': { 'format': '%(levelname)s %(asctime)s %(name)s %(message)s' }, }, 'handlers': { 'console': { 'class': 'logging.streamhandler', 'formatter': 'verbose' 22 Chapter 2. Contents
27 } }, }, 'loggers': { 'django_auth_adfs': { 'handlers': ['console'], 'level': 'DEBUG', }, }, ADFS OAuth2 flow This page briefly explains the way OAuth2 authentication with ADFS works (7) ---(5) > Django <-(6) ADFS (3) ^ ^ ^ (1)(2) (4) v (2) Browser <--(4) An unauthenticated user requests a protected page. 2. User gets redirected to ADFS. 3. ADFS authenticates the user. 4. ADFS redirected the user to a specific page and includes a authorization code in the query parameters 5. With the code Django requests an access token from ADFS 6. ADFS sends back an access token in JWT format including claims 7. Django validates the token and creates the user if it doesn t exists yet More details and a great explanation about what URL s are used in the process can be found here: com/2015/03/09/oauth2-authentication-with-adfs-3.0.html Contributing Contributions are welcome, and they are greatly appreciated! Every little bit helps, and credit will always be given ADFS OAuth2 flow 23
28 Get Started! Types of Contributions You can contribute in many ways: Report Bugs Report bugs in the issue section of the repository on GitHub. If you are reporting a bug, please include: Detailed steps to reproduce the bug. Any details about your local setup that might be helpful in troubleshooting. Fix Bugs Look through the issues for bugs. Anything tagged with bug is open to whoever wants to implement it. Implement Features Look through the issues for features. Anything tagged with feature is open to whoever wants to implement it. Write Documentation We could always use more documentation, whether as part of the docs or in docstrings in the code. Submit Feedback The best way to send feedback is to file an issue on GitHub. If you are proposing a feature: Explain in detail how it would work. Keep the scope as narrow as possible, to make it easier to implement. Changelog Fixed a bug were authentication failed when the last ADFS signing key was not the one that signed the JWT token. Django 1.11 support and tests. Proper handling the absence of code query parameter after ADFS redirect. Added ADFS configuration guide to docs. Allow boolean user model fields to be set based on claims. The namespace argument for include() is not needed anymore on Django >= Chapter 2. Contents
29 Fixed some Django 2.0 deprecation warnings, improving future django support Support for django 1.10 new style middleware using the MIDDLEWARE setting Numerous typos fixed in code and documentation. Proper handling of class variables to allow inheriting from the class AdfsBackend By default, the ADFS signing certificate is loaded from the FederationMetadata.xml file every 24 hours. Allowing to automatically follow certificate updates when the ADFS settings for AutoCertificateRollover is set to True (the default). Group assignment optimisation. Users are not removed and added to all groups anymore. Instead only the groups that need to be removed or added are handled. Backwards incompatible changes The redundant ADFS_ prefix was removed from the configuration variables. The REQUIRE_LOGIN_EXEMPT_URLS variable was renamed to LOGIN_EXEMPT_URLS User update code in authentication backend split into separate functions Made the absence of the group claim non-fatal to allow users without a group ADFS_REDIR_URI is now a required setting Now supports Python 2.7, 3.4 and 3.5 Now supports Django 1.7, 1.8 and 1.9 Added debug logging to aid in troubleshooting Added unit tests Lot s of code cleanup 2.8. Changelog 25
30 Fixed a possible issue with the cryptography package when used with apache + mod_wsgi. Added a optional context processor to make the ADFS authentication URL available as a template variable (ADFS_AUTH_URL). Added a optional middleware class to be able force an anonymous user to authenticate Initial release 26 Chapter 2. Contents
django-ratelimit-backend Documentation
django-ratelimit-backend Documentation Release 1.2 Bruno Renié Sep 13, 2017 Contents 1 Usage 3 1.1 Installation................................................ 3 1.2 Quickstart................................................
More informationdjango-cas Documentation
django-cas Documentation Release 2.3.6 Parth Kolekar January 17, 2016 Contents 1 django-cas 3 1.1 Documentation.............................................. 3 1.2 Quickstart................................................
More informationCID Documentation. Release Francis Reyes
CID Documentation Release 0.2.0 Francis Reyes Sep 30, 2017 Contents 1 Django Correlation IDs 1 1.1 Features.................................................. 1 Python Module Index 9 i ii CHAPTER 1 Django
More informationMicrosoft ADFS Configuration
Microsoft ADFS Configuration Side 1 af 12 1 Information 1.1 ADFS KMD Secure ISMS supports ADFS for integration with Microsoft Active Directory by implementing WS-Federation and SAML 2. The integration
More informationADFS integration with Ibistic Commerce Platform A walkthrough of the feature and basic configuration
IBISTIC TECHNOLOGIES ADFS integration with Ibistic Commerce Platform A walkthrough of the feature and basic configuration Magnus Akselvoll 19/02/2014 Change log 26/06/2012 Initial document 19/02/2014 Added
More informationConfiguration Guide - Single-Sign On for OneDesk
Configuration Guide - Single-Sign On for OneDesk Introduction Single Sign On (SSO) is a user authentication process that allows a user to access different services and applications across IT systems and
More informationQualys SAML & Microsoft Active Directory Federation Services Integration
Qualys SAML & Microsoft Active Directory Federation Services Integration Microsoft Active Directory Federation Services (ADFS) is currently supported for authentication. The Qualys ADFS integration must
More informationTECHNICAL GUIDE SSO SAML. At 360Learning, we don t make promises about technical solutions, we make commitments.
TECHNICAL GUIDE SSO SAML At 360Learning, we don t make promises about technical solutions, we make commitments. This technical guide is part of our Technical Documentation. 2 360Learning is a Leading European
More informationD9.2.2 AD FS via SAML2
D9.2.2 AD FS via SAML2 This guide assumes you have an AD FS deployment. This guide is based on Windows Server 2016. Third Light support staff cannot offer assistance with 3rd party tools, so while the
More informationnacelle Documentation
nacelle Documentation Release 0.4.1 Patrick Carey August 16, 2014 Contents 1 Standing on the shoulders of giants 3 2 Contents 5 2.1 Getting Started.............................................. 5 2.2
More informationdjango-reinhardt Documentation
django-reinhardt Documentation Release 0.1.0 Hyuntak Joo December 02, 2016 Contents 1 django-reinhardt 3 1.1 Installation................................................ 3 1.2 Usage...................................................
More informationVIEVU Solution AD Sync and ADFS Guide
VIEVU Solution AD Sync and ADFS Guide Introduction This guide describes how to operate the VIEVU Solution AD Sync utility and configure Active Directory Federation Services (ADFS). Additional support material
More informationConfiguring Alfresco Cloud with ADFS 3.0
Configuring Alfresco Cloud with ADFS 3.0 Prerequisites: You have a working domain on your Windows Server 2012 and successfully installed ADFS. For these instructions, I created: alfresco.me as a domain
More informationNETOP PORTAL ADFS & AZURE AD INTEGRATION
22.08.2018 NETOP PORTAL ADFS & AZURE AD INTEGRATION Contents 1 Description... 2 Benefits... 2 Implementation... 2 2 Configure the authentication provider... 3 Azure AD... 3 2.1.1 Create the enterprise
More informationSETTING UP ADFS A MANUAL
SETTING UP ADFS A MANUAL Contents Before configuring the settings on the ADFS server... 3 Set up ADFS... 6 Add Relying Party Trust... 7 Set the Claim Rules... 14 Rule 1... 17 Rule 2... 17 Rule 3... 18
More informationdjango-private-chat Documentation
django-private-chat Documentation Release 0.2.2 delneg Dec 12, 2018 Contents 1 :sunglasses: django-private-chat :sunglasses: 3 1.1 Important Notes............................................. 3 1.2 Documentation..............................................
More informationSSO Authentication with ADFS SAML 2.0. Ephesoft Transact Documentation
SSO Authentication with ADFS SAML 2.0 Ephesoft Transact Documentation Table of Contents Configure Ephesoft Transact... 1 Configure ADFS Server... 3 Export Certificate from ADFS Server... 7 Configure Ephesoft
More informationConfiguring ADFS for Academic Works
Page 1 of 10: ConfiguringADFSForAcademicWorks.docx Configuring ADFS for Academic Works Contents Description... 1 Prerequisites: (for ADFS 3.0)... 2 Install the Public SSL Cert on both the ADFS and the
More informationAD FS CONFIGURATION GUIDE
AD FS CONFIGURATION GUIDE Contents What is lynda.com?... 1 What this document explains... 1 Requirements... 1 Generate identity provider metadata... 2 Add a relying party trust... 2 Edit claim rules...
More informationmozilla-django-oidc Documentation
mozilla-django-oidc Documentation Release 1.0.0 Mozilla Jun 12, 2018 Contents 1 Installation 3 1.1 Quick start................................................ 3 1.2 Additional optional configuration....................................
More informationDjango MFA Documentation
Django MFA Documentation Release 1.0 Micro Pyramid Sep 20, 2018 Contents 1 Getting started 3 1.1 Requirements............................................... 3 1.2 Installation................................................
More informationTPS Documentation. Release Thomas Roten
TPS Documentation Release 0.1.0 Thomas Roten Sep 27, 2017 Contents 1 TPS: TargetProcess in Python! 3 2 Installation 5 3 Contributing 7 3.1 Types of Contributions..........................................
More informationdjango-openid Documentation
django-openid Documentation Release 2.0a Simon Willison September 27, 2017 Contents 1 Installation 3 2 Accepting OpenID 5 2.1 Redirecting somewhere else....................................... 6 2.2 Requesting
More informationRelease Ralph Offinger
nagios c heck p aloaltodocumentation Release 0.3.2 Ralph Offinger May 30, 2017 Contents 1 nagios_check_paloalto: a Nagios/Icinga Plugin 3 1.1 Documentation..............................................
More informationQuick Start Guide for SAML SSO Access
Quick Start Guide Quick Start Guide for SAML SSO Access Cisco Unity Connection SAML SSO 2 Introduction 2 Understanding Service Provider and Identity Provider 2 Understanding SAML Protocol 3 SSO Mode 4
More informationdjango-telegram-bot Documentation
django-telegram-bot Documentation Release 0.6.0 Juan Madurga December 21, 2016 Contents 1 django-telegram-bot 3 1.1 Documentation.............................................. 3 1.2 Quickstart................................................
More informationBambu API Documentation
Bambu API Documentation Release 2.0.1 Steadman Sep 27, 2017 Contents 1 About Bambu API 3 2 About Bambu Tools 2.0 5 3 Installation 7 4 Basic usage 9 5 Questions or suggestions? 11 6 Contents 13 6.1 Defining
More informationdj-libcloud Documentation
dj-libcloud Documentation Release 0.2.0 Daniel Greenfeld December 19, 2016 Contents 1 dj-libcloud 3 1.1 Documentation.............................................. 3 1.2 Quickstart................................................
More informationCloud Access Manager Configuration Guide
Cloud Access Manager 8.1.3 Configuration Guide Copyright 2017 One Identity LLC. ALL RIGHTS RESERVED. This guide contains proprietary information protected by copyright. The software described in this guide
More informationQuick Start Guide for SAML SSO Access
Standalone Doc - Quick Start Guide Quick Start Guide for SAML SSO Access Cisco Unity Connection SAML SSO 2 Introduction 2 Understanding Service Provider and Identity Provider 3 Understanding SAML Protocol
More informationIntegrating YuJa Active Learning into ADFS via SAML
Integrating YuJa Active Learning into ADFS via SAML 1. Overview This document is intended to guide users on how to setup a secure connection between YuJa (the Service Provider, or SP) and ADFS (the Identity
More informationArcGIS Enterprise Administration
TRAINING GUIDE ArcGIS Enterprise Administration Part 3 This session touches on key elements of Portal for ArcGIS setup, configuration and maintenance techniques. Table of Contents Portal for ArcGIS...
More informationIntegrating YuJa Active Learning with ADFS (SAML)
Integrating YuJa Active Learning with ADFS (SAML) 1. Overview This document is intended to guide users on how to setup a secure connection between the YuJa Active Learning Platform referred to as the Service
More informationConfigure Single Sign-On using CUCM and AD FS 2.0 (Windows Server 2008 R2)
Configure Single Sign-On using CUCM and AD FS 2.0 (Windows Server 2008 R2) Contents Introduction Prerequisites Requirements Components Used Download and Install AD FS 2.0 on your Windows Server Configure
More informationCONFIGURING AD FS AS A THIRD-PARTY IDP IN VMWARE IDENTITY MANAGER: VMWARE WORKSPACE ONE OPERATIONAL TUTORIAL VMware Workspace ONE
GUIDE MARCH 2019 PRINTED 28 MARCH 2019 CONFIGURING AD FS AS A THIRD-PARTY IDP IN VMWARE IDENTITY MANAGER: VMWARE WORKSPACE ONE VMware Workspace ONE Table of Contents Overview Introduction Audience AD FS
More informationdjango-mama-cas Documentation
django-mama-cas Documentation Release 2.4.0 Jason Bittel Oct 06, 2018 Contents 1 Contents 3 1.1 Installation................................................ 3 1.2 Settings..................................................
More informationWebthority can provide single sign-on to web applications using one of the following authentication methods:
Webthority HOW TO Configure Web Single Sign-On Webthority can provide single sign-on to web applications using one of the following authentication methods: HTTP authentication (for example Kerberos, NTLM,
More informationGoogle Domain Shared Contacts Client Documentation
Google Domain Shared Contacts Client Documentation Release 0.1.0 Robert Joyal Mar 31, 2018 Contents 1 Google Domain Shared Contacts Client 3 1.1 Features..................................................
More informationDCLI User's Guide. Data Center Command-Line Interface
Data Center Command-Line Interface 2.10.2 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have comments about this documentation, submit
More informationMantis STIX Importer Documentation
Mantis STIX Importer Documentation Release 0.2.0 Siemens February 27, 2014 Contents 1 Mantis STIX Importer 3 1.1 Documentation.............................................. 3 1.2 Quickstart................................................
More informationConfiguring Claims-based Authentication for Microsoft Dynamics CRM Server. Last updated: May 2015
Configuring Claims-based Authentication for Microsoft Dynamics CRM Server Last updated: May 2015 This document is provided "as-is". Information and views expressed in this document, including URL and other
More informationIntegrating AirWatch and VMware Identity Manager
Integrating AirWatch and VMware Identity Manager VMware AirWatch 9.1.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a
More informationSetting Up Resources in VMware Identity Manager. VMware Identity Manager 2.8
Setting Up Resources in VMware Identity Manager VMware Identity Manager 2.8 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have comments
More informationesignlive SAML Administrator's Guide Product Release: 6.5 Date: July 05, 2018 esignlive 8200 Decarie Blvd, Suite 300 Montreal, Quebec H4P 2P5
esignlive SAML Administrator's Guide Product Release: 6.5 Date: July 05, 2018 esignlive 8200 Decarie Blvd, Suite 300 Montreal, Quebec H4P 2P5 Phone: 1-855-MYESIGN Fax: (514) 337-5258 Web: www.esignlive.com
More informationConfiguring the vrealize Automation Plug-in for ServiceNow
Configuring the vrealize Automation Plug-in for ServiceNow January 16, 2017 This document supports the version of each product listed and supports all subsequent versions until the document is replaced
More informationdjango-stored-messages Documentation
django-stored-messages Documentation Release 1.4.0 evonove Nov 10, 2017 Contents 1 Features 3 2 Compatibility table 5 3 Contents 7 3.1 Installation................................................ 7 3.2
More informationDjango IPRestrict Documentation
Django IPRestrict Documentation Release 1.4.1 Tamas Szabo Nov 06, 2017 Contents 1 Table of Contents 3 1.1 Requirements and Installation...................................... 3 1.2 Configuration...............................................
More informationConfiguring ADFS 2.1 or 3.0 in Windows Server 2012 or 2012 R2 for Nosco Web SSO
Configuring ADFS 2.1 or 3.0 in Windows Server 2012 or 2012 R2 for Nosco Web SSO Disclaimer and prerequisites The instructions in this document apply to Windows Server 2012 with ADFS 2.1 and Windows Server
More informationdjango-users2 Documentation
django-users2 Documentation Release 0.2.1 Mishbah Razzaque Mar 16, 2017 Contents 1 django-users2 3 1.1 Features.................................................. 3 1.2 Documentation..............................................
More informationIntegrating the YuJa Enterprise Video Platform with ADFS (SAML)
Integrating the YuJa Enterprise Video Platform with ADFS (SAML) Overview This document is intended to guide users on how to setup a secure connection between the YuJa Enterprise Video Platform referred
More informationDCLI User's Guide. Data Center Command-Line Interface 2.9.1
Data Center Command-Line Interface 2.9.1 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have comments about this documentation, submit
More informationNimsoft Service Desk. Single Sign-On Configuration Guide. [assign the version number for your book]
Nimsoft Service Desk Single Sign-On Configuration Guide [assign the version number for your book] Legal Notices Copyright 2012, CA. All rights reserved. Warranty The material contained in this document
More informationSetting Up Resources in VMware Identity Manager (On Premises) Modified on 30 AUG 2017 VMware AirWatch 9.1.1
Setting Up Resources in VMware Identity Manager (On Premises) Modified on 30 AUG 2017 VMware AirWatch 9.1.1 Setting Up Resources in VMware Identity Manager (On Premises) You can find the most up-to-date
More informationDCLI User's Guide. Modified on 20 SEP 2018 Data Center Command-Line Interface
Modified on 20 SEP 2018 Data Center Command-Line Interface 2.10.0 You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/ If you have comments about
More informationSetting Up Resources in VMware Identity Manager
Setting Up Resources in VMware Identity Manager VMware Identity Manager 2.7 This document supports the version of each product listed and supports all subsequent versions until the document is replaced
More informationOAuth2 Autoconfig. Copyright
Copyright Table of Contents... iii 1. Downloading... 1 1.1. Source... 1 1.2. Maven... 1 1.3. Gradle... 2 2. Authorization Server... 3 3. Resource Server... 4 I. Token Type in User Info... 5 II. Customizing
More informationGearthonic Documentation
Gearthonic Documentation Release 0.2.0 Timo Steidle August 11, 2016 Contents 1 Quickstart 3 2 Contents: 5 2.1 Usage................................................... 5 2.2 API....................................................
More informationOTX to MISP. Release 1.4.2
OTX to MISP Release 1.4.2 May 11, 2018 Contents 1 Overview 1 1.1 Installation................................................ 1 1.2 Documentation.............................................. 1 1.3 Alienvault
More informationopen-helpdesk Documentation
open-helpdesk Documentation Release 0.9.9 Simone Dalla Nov 16, 2017 Contents 1 Overview 3 1.1 Dependencies............................................... 3 1.2 Documentation..............................................
More informationCloud Secure Integration with ADFS. Deployment Guide
Cloud Secure Integration with ADFS Deployment Guide Product Release 8.3R3 Document Revisions 1.0 Published Date October 2017 Pulse Secure, LLC 2700 Zanker Road, Suite 200 San Jose CA 95134 http://www.pulsesecure.net
More informationDjango-CSP Documentation
Django-CSP Documentation Release 3.0 James Socol, Mozilla September 06, 2016 Contents 1 Installing django-csp 3 2 Configuring django-csp 5 2.1 Policy Settings..............................................
More informationColligo Console. Administrator Guide
Colligo Console Administrator Guide Contents About this guide... 6 Audience... 6 Requirements... 6 Colligo Technical Support... 6 Introduction... 7 Colligo Console Overview... 8 Colligo Console Home Page...
More informationdjango-idioticon Documentation
django-idioticon Documentation Release 0.0.1 openpolis June 10, 2014 Contents 1 django-idioticon 3 1.1 Documentation.............................................. 3 1.2 Quickstart................................................
More informationActive Directory Federation Services (ADFS) Customer Implementation Guide Version 2.2
Active Directory Federation Services (ADFS) Customer Implementation Guide 2018-01-02 Version 2.2 TABLE OF CONTENTS Introduction... 2 Exchanging Metadata... 2 Creating a Relying Party Trust in ADFS... 2
More informationJava Relying Party API v1.0 Programmer s Guide
Java Relying Party API v1.0 Programmer s Guide 4 June 2018 Authors: Peter Höbel peter.hoebel@open-xchange.com Vittorio Bertola vittorio.bertola@open-xchange.com This document is copyrighted by the ID4me
More informationGuide to Deploying VMware Workspace ONE with VMware Identity Manager. SEP 2018 VMware Workspace ONE
Guide to Deploying VMware Workspace ONE with VMware Identity Manager SEP 2018 VMware Workspace ONE You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/
More informationIntegration Guide. PingFederate SAML Integration Guide (SP-Initiated Workflow)
Integration Guide PingFederate SAML Integration Guide (SP-Initiated Workflow) Copyright Information 2018. SecureAuth is a registered trademark of SecureAuth Corporation. SecureAuth s IdP software, appliances,
More informationSafeNet Authentication Client
SafeNet Authentication Client Integration Guide All information herein is either public information or is the property of and owned solely by Gemalto and/or its subsidiaries who shall have and keep the
More informationf5-icontrol-rest Documentation
f5-icontrol-rest Documentation Release 1.3.10 F5 Networks Aug 04, 2018 Contents 1 Overview 1 2 Installation 3 2.1 Using Pip................................................. 3 2.2 GitHub..................................................
More informationVMware Identity Manager Administration
VMware Identity Manager Administration VMware Identity Manager 2.4 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a new
More informationPython simple arp table reader Documentation
Python simple arp table reader Documentation Release 0.0.1 David Francos Nov 17, 2017 Contents 1 Python simple arp table reader 3 1.1 Features.................................................. 3 1.2 Usage...................................................
More informationInstalling and Configuring VMware Identity Manager Connector (Windows) OCT 2018 VMware Identity Manager VMware Identity Manager 3.
Installing and Configuring VMware Identity Manager Connector 2018.8.1.0 (Windows) OCT 2018 VMware Identity Manager VMware Identity Manager 3.3 You can find the most up-to-date technical documentation on
More informationDjango Wordpress API Documentation
Django Wordpress API Documentation Release 0.1.0 Swapps Jun 28, 2017 Contents 1 Django Wordpress API 3 1.1 Documentation.............................................. 3 1.2 Quickstart................................................
More informationADFS Authentication and Configuration January 2017
ADFS Authentication and Configuration January 2017 International Corporation 1 Table of Contents Introduction... 2 Changelog for Configure Active Directory Synchronization... 3 2.1. Changes in Configure
More informationKinto Documentation. Release Mozilla Services Da French Team
Kinto Documentation Release 0.2.2 Mozilla Services Da French Team June 23, 2015 Contents 1 In short 3 2 Table of content 5 2.1 API Endpoints.............................................. 5 2.2 Installation................................................
More informationUMANTIS CLOUD SSO (ADFS) CONFIGURATION GUIDE
UMANTIS CLOUD SSO (ADFS) CONFIGURATION GUIDE Haufe-umantis AG Untertrasse 11 CH-9001 St. Gallen Tel. +41 71 224 01 01 Fax +41 71 224 01 02 umantis@haufe.com www.haufe.com/umantis INHALT umantis Cloud SSO
More informationchatterbot-weather Documentation
chatterbot-weather Documentation Release 0.1.1 Gunther Cox Nov 23, 2018 Contents 1 chatterbot-weather 3 1.1 Installation................................................ 3 1.2 Example.................................................
More informationejpiaj Documentation Release Marek Wywiał
ejpiaj Documentation Release 0.4.0 Marek Wywiał Mar 06, 2018 Contents 1 ejpiaj 3 1.1 License.................................................. 3 1.2 Features..................................................
More informationPython Project Example Documentation
Python Project Example Documentation Release 0.1.0 Neil Stoddard Mar 22, 2017 Contents 1 Neilvana Example 3 1.1 Features.................................................. 3 1.2 Credits..................................................
More informationfor SharePoint On-prem (v5)
for SharePoint On-prem (v5) Contents 2 Contents Cloud Help for Community Managers... 3 What is Jive for SharePoint... 4 Architectural Overview...4 Functional Overview... 4 Setting up Jive for SharePoint
More informationgoogle-search Documentation
google-search Documentation Release 1.0.0 Anthony Hseb May 08, 2017 Contents 1 google-search 3 1.1 Features.................................................. 3 1.2 Credits..................................................
More informationTUT Integrating Access Manager into a Microsoft Environment November 2014
TUT7189 - Integrating Access Manager into a Microsoft Environment November 2014 #BrainShare #NetIQ7189 Session Agenda Integrating Access Manager with Active Directory Federation Services (ADFS) ADFS Basics
More informationsainsmart Documentation
sainsmart Documentation Release 0.3.1 Victor Yap Jun 21, 2017 Contents 1 sainsmart 3 1.1 Install................................................... 3 1.2 Usage...................................................
More informationsilk Documentation Release 0.3 Michael Ford
silk Documentation Release 0.3 Michael Ford September 20, 2015 Contents 1 Quick Start 1 1.1 Other Installation Options........................................ 1 2 Profiling 3 2.1 Decorator.................................................
More informationPython Schema Generator Documentation
Python Schema Generator Documentation Release 1.0.0 Peter Demin June 26, 2016 Contents 1 Mutant - Python code generator 3 1.1 Project Status............................................... 3 1.2 Design..................................................
More informationpyldavis Documentation
pyldavis Documentation Release 2.1.2 Ben Mabey Feb 06, 2018 Contents 1 pyldavis 3 1.1 Installation................................................ 3 1.2 Usage...................................................
More informationHow to Use ADFS to Implement Single Sign-On for an ASP.NET MVC Application
How to Use ADFS to Implement Single Sign-On for an ASP.NET MVC Application With Azure s Access Control service retiring next month, I needed to find another way to use an on-premise Active Directory account
More informationDirectory Integration with VMware Identity Manager
Directory Integration with VMware Identity Manager VMware AirWatch 9.1 This document supports the version of each product listed and supports all subsequent versions until the document is replaced by a
More informationTACACs+, RADIUS, LDAP, RSA, and SAML
This chapter contains the following sections: Overview, page 1 RADIUS, page 1 TACACS+ Authentication, page 2 User IDs in the APIC Bash Shell, page 2 Login Domains, page 3 LDAP/Active Directory Authentication,
More informationdjango-responsive2 Documentation
django-responsive2 Documentation Release 0.1.3 Mishbah Razzaque Sep 27, 2017 Contents 1 django-responsive2 3 1.1 Why would you use django-responsive2?................................ 3 1.2 Using django-responsive2
More informationRoman Numeral Converter Documentation
Roman Numeral Converter Documentation Release 0.1.0 Adrian Cruz October 07, 2014 Contents 1 Roman Numeral Converter 3 1.1 Features.................................................. 3 2 Installation 5
More informationConfiguring Claims-based Authentication for Microsoft Dynamics CRM Server. Last updated: June 2014
Configuring Claims-based Authentication for Microsoft Dynamics CRM Server Last updated: June 2014 This document is provided "as-is". Information and views expressed in this document, including URL and
More informationredis-lock Release 3.2.0
redis-lock Release 3.2.0 Sep 05, 2018 Contents 1 Overview 1 1.1 Usage................................................... 1 1.2 Features.................................................. 3 1.3 Implementation..............................................
More informationI2C LCD Documentation
I2C LCD Documentation Release 0.1.0 Peter Landoll Sep 04, 2017 Contents 1 I2C LCD 3 1.1 Features.................................................. 3 1.2 Credits..................................................
More informationPoetaster. Release 0.1.1
Poetaster Release 0.1.1 September 21, 2016 Contents 1 Overview 1 1.1 Installation................................................ 1 1.2 Documentation.............................................. 1 1.3
More informationVMware Identity Manager Cloud Deployment. DEC 2017 VMware AirWatch 9.2 VMware Identity Manager
VMware Identity Manager Cloud Deployment DEC 2017 VMware AirWatch 9.2 VMware Identity Manager You can find the most up-to-date technical documentation on the VMware website at: https://docs.vmware.com/
More informationGuide to Deploying VMware Workspace ONE. VMware Identity Manager VMware AirWatch 9.1
Guide to Deploying VMware Workspace ONE VMware Identity Manager 2.9.1 VMware AirWatch 9.1 Guide to Deploying VMware Workspace ONE You can find the most up-to-date technical documentation on the VMware
More informationVMware Identity Manager Cloud Deployment. Modified on 01 OCT 2017 VMware Identity Manager
VMware Identity Manager Cloud Deployment Modified on 01 OCT 2017 VMware Identity Manager You can find the most up-to-date technical documentation on the VMware Web site at: https://docs.vmware.com/ The
More informationOkta Integration Guide for Web Access Management with F5 BIG-IP
Okta Integration Guide for Web Access Management with F5 BIG-IP Contents Introduction... 3 Publishing SAMPLE Web Application VIA F5 BIG-IP... 5 Configuring Okta as SAML 2.0 Identity Provider for F5 BIG-IP...
More informationdjango-avatar Documentation
django-avatar Documentation Release 2.0 django-avatar developers Oct 04, 2018 Contents 1 Installation 3 2 Usage 5 3 Template tags and filter 7 4 Global Settings 9 5 Management Commands 11 i ii django-avatar
More information