RMLL 2014 - LemonLDAP::NG - What's new under the SSOn

•

0 gefällt mir•1,523 views

Clément OUDOT

Presentation of WebSSO LemonLDAP::NG and focus on new features from 1.4 release

Technologie

What's new under the SSOn?
Clément OUDOT
coudot@linagora.com

4
SSOme history
2003 2006 2010 2014
Project
creation
NG
version
SAML
CAS
OpenID
1.4
release

5
It's SSO simple!
User
Web Application
WebSSO Portal
1
2
3

6
CompSSOnents
CommonCommon
ManagerManager
HandlerHandler
PortalPortal
Administration
interface
User interactions
Applications protection

8
AuthenticaSSOn backends
LDAPLDAP
ADAD
ApacheApache SAMLSAML
CASCAS RadiusRadius OpenIDOpenID
WebIDWebID
BrowserBrowser
IDID
DBIDBI
YubikeyYubikey

9
Self SSOrvice
PasswordPassword
changechange
PasswordPassword
resetreset
LoginLogin
historyhistory

10
Identity protoSSOls gateway
SAMLSAMLCASCAS
OpenIDOpenID

13
SSOelf register service
Fill a form
First name
Last name
Email
Validate
by
clicking
link in
email
Receive
login and
password
in email

14
use Mouse; # AweSSOme Perl
ConfigurationConfiguration
attributesattributes
SessionsSessions
HandlerHandler CaptchaCaptcha

15
SSOession identifiers
MD5
SHA256
8c7fef2b3820ecdea49614be7b769c62
9be0bab50d1c14b51264a7194fc2517cb25a5788e860cf672823dff434348dba

16
SAML IDP SSO initiated
11
22
Identity
Provider
Service
Provider
http://auth.example.com/saml/singleSignOn?IDPInitiated=1&spConfKey=myserviceprovider

17
Nginx SSOpport
LUA Perl
Work in progressHandler available on GitHub

19
SSOanks
RMLL Staff
RMLL Security track leaders
LemonLDAP::NG team
LINAGORA

20
SSOtay tuned
http://lemonldap-ng.org
IRC #lemonldap-ng
@freenode
http://mail.ow2.org/wws/
@lemonldapng
http://www.ohloh.net/p/lemonldap-ng

Empfohlen

[OW2Con 2015] LemonLDAP::NG 2.0 overviewClément OUDOT

The wonderful story of Web Authentication and Single-Sign OnClément OUDOT

[OSSParis 2015] The OpenID Connect ProtocolClément OUDOT

[LDAPCon 2015] The OpenID Connect ProtocolClément OUDOT

[FOSDEM 2019] LemonLDAP::NG 2.0Clément OUDOT

Sử dụng TLS đúng cách - Phạm Tùng DươngSecurity Bootcamp

Live question » 修改华为hg255 d超级密码，改用原路由fuwotest123

The guide of Security JerkClément OUDOT

Empfohlen

[OW2Con 2015] LemonLDAP::NG 2.0 overviewClément OUDOT

The wonderful story of Web Authentication and Single-Sign OnClément OUDOT

[OSSParis 2015] The OpenID Connect ProtocolClément OUDOT

[LDAPCon 2015] The OpenID Connect ProtocolClément OUDOT

[FOSDEM 2019] LemonLDAP::NG 2.0Clément OUDOT

Sử dụng TLS đúng cách - Phạm Tùng DươngSecurity Bootcamp

Live question » 修改华为hg255 d超级密码，改用原路由fuwotest123

The guide of Security JerkClément OUDOT

Présentation de LemonLDAP::NG aux Journées Perl 2016Clément OUDOT

[JDLL 2016] OpenID Connect et FranceConnectClément OUDOT

Matinée Pour Comprendre LinID - Intégration du serveur Active Directory avec ...Clément OUDOT

Matinée Pour Comprendre LinID - Retour d'expérience de l'AFNICClément OUDOT

RMLL 2014 - Site statique avec Templer, Bootstrap et GitClément OUDOT

The OpenID Connect ProtocolClément OUDOT

Le Guide du Connard du Logiciel LibreClément OUDOT

RMLL 2014 - LDAP Synchronization ConnectorClément OUDOT

KR2016 The Free Software Bastard GuideClément OUDOT

S2LQ - Authentification unique sur le Web avec le logiciel libre LemonLDAP::NGClément OUDOT

Analyse OpenLDAP logs with ELKClément OUDOT

Matinée Pour Comprendre LinID - Mise en place de la fédération des identités...Clément OUDOT

RMLL 2014 - OpenLDAP - Manage password policyClément OUDOT

JDLL 2014 - Introduction aux annuaires LDAPClément OUDOT

LemonLDAP::NG 2.0. OW2con'15, November 17, Paris. OW2

OW2con'14 - LemonLDAP::NG 1.4 New features, LinagoraOW2

Enterprise Single Sign On WSO2

Open Source Identity Integration with OpenSSOelliando dias

Introduction to SAML 2.0Mika Koivisto

Open sso fisl9.0Startup Cursos

Ember.js: The New BlackMarat Dyatko

Extending Oracle SSOkurtvm

Weitere ähnliche Inhalte

Andere mochten auch

Présentation de LemonLDAP::NG aux Journées Perl 2016Clément OUDOT

[JDLL 2016] OpenID Connect et FranceConnectClément OUDOT

Matinée Pour Comprendre LinID - Intégration du serveur Active Directory avec ...Clément OUDOT

Matinée Pour Comprendre LinID - Retour d'expérience de l'AFNICClément OUDOT

RMLL 2014 - Site statique avec Templer, Bootstrap et GitClément OUDOT

The OpenID Connect ProtocolClément OUDOT

Le Guide du Connard du Logiciel LibreClément OUDOT

RMLL 2014 - LDAP Synchronization ConnectorClément OUDOT

KR2016 The Free Software Bastard GuideClément OUDOT

S2LQ - Authentification unique sur le Web avec le logiciel libre LemonLDAP::NGClément OUDOT

Analyse OpenLDAP logs with ELKClément OUDOT

Matinée Pour Comprendre LinID - Mise en place de la fédération des identités...Clément OUDOT

RMLL 2014 - OpenLDAP - Manage password policyClément OUDOT

JDLL 2014 - Introduction aux annuaires LDAPClément OUDOT

Andere mochten auch (14)

Présentation de LemonLDAP::NG aux Journées Perl 2016

[JDLL 2016] OpenID Connect et FranceConnect

Matinée Pour Comprendre LinID - Intégration du serveur Active Directory avec ...

Matinée Pour Comprendre LinID - Retour d'expérience de l'AFNIC

RMLL 2014 - Site statique avec Templer, Bootstrap et Git

The OpenID Connect Protocol

Le Guide du Connard du Logiciel Libre

RMLL 2014 - LDAP Synchronization Connector

KR2016 The Free Software Bastard Guide

S2LQ - Authentification unique sur le Web avec le logiciel libre LemonLDAP::NG

Analyse OpenLDAP logs with ELK

Matinée Pour Comprendre LinID - Mise en place de la fédération des identités...

RMLL 2014 - OpenLDAP - Manage password policy

JDLL 2014 - Introduction aux annuaires LDAP

Ähnlich wie RMLL 2014 - LemonLDAP::NG - What's new under the SSOn

LemonLDAP::NG 2.0. OW2con'15, November 17, Paris. OW2

OW2con'14 - LemonLDAP::NG 1.4 New features, LinagoraOW2

Enterprise Single Sign On WSO2

Open Source Identity Integration with OpenSSOelliando dias

Introduction to SAML 2.0Mika Koivisto

Open sso fisl9.0Startup Cursos

Ember.js: The New BlackMarat Dyatko

Extending Oracle SSOkurtvm

Jasig Central Authentication Service in Ten MinutesAndrew Petro

Getting Enough REST? Understanding the SharePoint 2013 REST / ODATA ServicesHilton Giesenow

Incredible Edible IdentityForgeRock

RMLL 2013 - The SAML Protocol: Single Sign On for skilled peopleClément OUDOT

Planning for Windows 10 and Internet Explorer 11 Flexera

Workshop KrakYourNet2016 - Web applications hacking Ruby on Rails example Anna Klepacka

Solving Single-Sign-OnAaron King

Alfresco: Implementing secure single sign on (SSO) with OpenSAMLJ V

WSO2 Identity Server WSO2

A Technical Guide To Deploying Single Sign OnGabriella Davis

RoR Workshop - Web applications hacking - Ruby on Rails exampleRailwaymen

WebSSO and Access Management with LemonLDAP::NGClément OUDOT

Ähnlich wie RMLL 2014 - LemonLDAP::NG - What's new under the SSOn (20)

LemonLDAP::NG 2.0. OW2con'15, November 17, Paris.

OW2con'14 - LemonLDAP::NG 1.4 New features, Linagora

Enterprise Single Sign On

Open Source Identity Integration with OpenSSO

Introduction to SAML 2.0

Open sso fisl9.0

Ember.js: The New Black

Extending Oracle SSO

Jasig Central Authentication Service in Ten Minutes

Getting Enough REST? Understanding the SharePoint 2013 REST / ODATA Services

Incredible Edible Identity

RMLL 2013 - The SAML Protocol: Single Sign On for skilled people

Planning for Windows 10 and Internet Explorer 11

Workshop KrakYourNet2016 - Web applications hacking Ruby on Rails example

Solving Single-Sign-On

Alfresco: Implementing secure single sign on (SSO) with OpenSAML

WSO2 Identity Server

A Technical Guide To Deploying Single Sign On

RoR Workshop - Web applications hacking - Ruby on Rails example

WebSSO and Access Management with LemonLDAP::NG

Mehr von Clément OUDOT

[FLOSSCON 2019] Gestion des authentifications et des accès avec LemonLDAP::NG...Clément OUDOT

[OW2Con 2018] The FusionIAM projectClément OUDOT

[JDLL 2018] Templer, Git, Bootstrap, PHP : des outils libres pour concevoir l...Clément OUDOT

[OSSPARIS17] Le guide du connard du logiciel libreClément OUDOT

[OSSPARIS17] Des logiciels libres pour la gestion des identités !Clément OUDOT

[RMLL2017] Templer, Git, Bootstrap, PHP : des outils libres pour concevoir le...Clément OUDOT

[RMLL2017] le guide du connard du logiciel libreClément OUDOT

[RMLL2017] LDAPCon 2017Clément OUDOT

[RMLL2017] Des logiciels libres pour la gestion des identités !Clément OUDOT

[OW2Con 2017] News from LemonLDAP::NGClément OUDOT

[JDLL 2017] Le Guide du Connard du Logiciel LibreClément OUDOT

Mehr von Clément OUDOT (11)

[FLOSSCON 2019] Gestion des authentifications et des accès avec LemonLDAP::NG...

[OW2Con 2018] The FusionIAM project

[JDLL 2018] Templer, Git, Bootstrap, PHP : des outils libres pour concevoir l...

[OSSPARIS17] Le guide du connard du logiciel libre

[OSSPARIS17] Des logiciels libres pour la gestion des identités !

[RMLL2017] Templer, Git, Bootstrap, PHP : des outils libres pour concevoir le...

[RMLL2017] le guide du connard du logiciel libre

[RMLL2017] LDAPCon 2017

[RMLL2017] Des logiciels libres pour la gestion des identités !

[OW2Con 2017] News from LemonLDAP::NG

[JDLL 2017] Le Guide du Connard du Logiciel Libre

Kürzlich hochgeladen

WordPress Websites for Engineers: Elevate Your Brandgvaughan

DevoxxFR 2024 Reproducible Builds with Apache MavenHervé Boutemy

Dev Dives: Streamline document processing with UiPath Studio WebUiPathCommunity

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek SchlawackFwdays

New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024BookNet Canada

"Debugging python applications inside k8s environment", Andrii SoldatenkoFwdays

Unleash Your Potential - Namagunga Girls Coding ClubKalema Edgar

SIP trunking in Janus @ Kamailio World 2024Lorenzo Miniero

Scanning the Internet for External Cloud Exposures via SSL CertsRizwan Syed

Leverage Zilliz Serverless - Up to 50X Saving for Your Vector Storage CostZilliz

Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdfPrecisely

How to write a Business Continuity PlanDatabarracks

Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)Mark Simos

From Family Reminiscence to Scholarly Archive .Alan Dix

TrustArc Webinar - How to Build Consumer Trust Through Data PrivacyTrustArc

Gen AI in Business - Global Trends Report 2024.pdfAddepto

DMCC Future of Trade Web3 - Special EditionDubai Multi Commodity Centre

Anypoint Exchange: It’s Not Just a Repo!Manik S Magar

Commit 2024 - Secret Management made easyAlfredo García Lavilla

Advanced Test Driven-Development @ php[tek] 2024Scott Keck-Warren

Kürzlich hochgeladen (20)

WordPress Websites for Engineers: Elevate Your Brand

DevoxxFR 2024 Reproducible Builds with Apache Maven

Dev Dives: Streamline document processing with UiPath Studio Web

"Subclassing and Composition – A Pythonic Tour of Trade-Offs", Hynek Schlawack

New from BookNet Canada for 2024: BNC CataList - Tech Forum 2024

"Debugging python applications inside k8s environment", Andrii Soldatenko

Unleash Your Potential - Namagunga Girls Coding Club

SIP trunking in Janus @ Kamailio World 2024

Scanning the Internet for External Cloud Exposures via SSL Certs

Leverage Zilliz Serverless - Up to 50X Saving for Your Vector Storage Cost

Hyperautomation and AI/ML: A Strategy for Digital Transformation Success.pdf

How to write a Business Continuity Plan

Tampa BSides - Chef's Tour of Microsoft Security Adoption Framework (SAF)

From Family Reminiscence to Scholarly Archive .

TrustArc Webinar - How to Build Consumer Trust Through Data Privacy

Gen AI in Business - Global Trends Report 2024.pdf

DMCC Future of Trade Web3 - Special Edition

Anypoint Exchange: It’s Not Just a Repo!

Commit 2024 - Secret Management made easy

Advanced Test Driven-Development @ php[tek] 2024

RMLL 2014 - LemonLDAP::NG - What's new under the SSOn

1. What's new under the SSOn? Clément OUDOT coudot@linagora.com

2. 2 About the SSOpeaker

3. 3 LemonLDAP::NG PreSSOntation

4. 4 SSOme history 2003 2006 2010 2014 Project creation NG version SAML CAS OpenID 1.4 release

5. 5 It's SSO simple! User Web Application WebSSO Portal 1 2 3

6. 6 CompSSOnents CommonCommon ManagerManager HandlerHandler PortalPortal Administration interface User interactions Applications protection

7. 7

8. 8 AuthenticaSSOn backends LDAPLDAP ADAD ApacheApache SAMLSAML CASCAS RadiusRadius OpenIDOpenID WebIDWebID BrowserBrowser IDID DBIDBI YubikeyYubikey

9. 9 Self SSOrvice PasswordPassword changechange PasswordPassword resetreset LoginLogin historyhistory

10. 10 Identity protoSSOls gateway SAMLSAMLCASCAS OpenIDOpenID

11. 11 VerSSOn 1.4

12. 12 Bootstrap SSOkin

13. 13 SSOelf register service Fill a form First name Last name Email Validate by clicking link in email Receive login and password in email

14. 14 use Mouse; # AweSSOme Perl ConfigurationConfiguration attributesattributes SessionsSessions HandlerHandler CaptchaCaptcha

15. 15 SSOession identifiers MD5 SHA256 8c7fef2b3820ecdea49614be7b769c62 9be0bab50d1c14b51264a7194fc2517cb25a5788e860cf672823dff434348dba

16. 16 SAML IDP SSO initiated 11 22 Identity Provider Service Provider http://auth.example.com/saml/singleSignOn?IDPInitiated=1&spConfKey=myserviceprovider

17. 17 Nginx SSOpport LUA Perl Work in progressHandler available on GitHub

18. 18 QueSSOtions?

19. 19 SSOanks RMLL Staff RMLL Security track leaders LemonLDAP::NG team LINAGORA

20. 20 SSOtay tuned http://lemonldap-ng.org IRC #lemonldap-ng @freenode http://mail.ow2.org/wws/ @lemonldapng http://www.ohloh.net/p/lemonldap-ng

21. 21 See you SSOn!