How to
Release 4.3’s diagnostics logging changes
Introduction Diagnostics logging is one of the most useful feature to investigate problems when something doesn’t behave the way it should be, either it is an SSO flow, an token request, or a REST API call. While the feature is […]
Eherkenning support on Identify
Configure Identify system set up to support eID messages After the tenant creation, user needs to login to the Admin site then access to the system setup page to do the following configuration: Sign metadata: set it to be True […]
ActAs functionality at the connection and the user levels
Requirement From the user detail page, it must be possible to select which services the user can do act-as for. How the ActAs function works at UserLevel There is a requester (named as A, let’s say A is a […]
How to implement a custom sub security token resolver
The custom security store resolver and sub resolver provide the extensible points needed to plug in custom code that can handle any kind of KeyInfo found in a SAML 2.0 message. A KeyInfo element contains information about a security key […]
Safewhere*Identify and eHerkenning specifications
[this topic is under development] Safewhere*Identify 4.3 fully supports the HM role that is defined by eHerkenning specifications at https://afsprakenstelsel.etoegang.nl/display/as/Interface+specifications+DV-HM+1.9 and https://afsprakenstelsel.etoegang.nl/display/as/Interface+specifications+HM-AD+1.9. The following topics will guide you through the set up process to let Safewhere*Identify work as the HM: […]
How to connect Safewhere*Identify to AD FS 3.0 with Artifact binding
The following article describes the process for connecting Safewhere*Identify to AD FS 3.0 via Artifact binding. It is recommended that you read the following document before starting: • How to connect Safewhere*Identify to AD FS 2.0 https://safewhere.zendesk.com/entries/23798537-How-to-connect-Safewhere-Identify-to-AD-FS-2-0 • Microsoft’s AD […]
Identify*Runtime: How to disable Relaystate validation
2.0 requires ‘s size to be no larger than 80 bytes. The standard has been troublesome for many years because a lot of 2.0 implementations employ longer parameter. Since version 4.2.0.207, has addressed this issue by the attribute DisableRelayStateSizeValidation. Simply […]
Interceptor: how to set up the interactive user profiles selection feature
Introduction to Interceptor The most common login flow in is: A user accesses a service provider and is redirected to . then redirects the user to an authentication provider where he or she will enter credentials to login. The provider […]
Control binding of SAML 2.0 for WIF
Introduction Safewhere’s SAML 2.0 for WIF component delivers a full implementation of the Security Assertion Markup Language (SAML) 2.0 protocol on the Windows Identity Foundation (WIF) enabling developers of ASP.NET applications to connect directly into SAML 2.0 federations. Our new […]
How to customize the IdP list
1. For the stuffs relating to logo, CSS, you can access the folder at: C:\Program Files\Safewhere\Identify\Tenants\[yourtenant]\runtime\Content. We have 2 main files: css and Site.Mobile.css 2. For JS script, you can input them at: C:\Program Files\Safewhere\Identify\Tenants\[yourtenant]\runtime\Scripts 3. In case you need […]