KIWI TCMS login security - kiwi-tcms

is there any way to build more security for Login
eg:
lock user for more than 3 wrong attempts
login through Oauth with GITLAB
TIA

Related

Blazor Server with Azure AD authentication - Update user roles in real time

This question is simliar to Blazor Server - Refresh User Roles without Logging Out? but for AzureAD authentication instead of the ASP.NET local database version.
Following the Microsoft tutorial - Blazor Server with Azure AD , it all worked as advertised in the app, and I have assigned App Roles through the Azure Portal.
However, changes to the App Roles only "show up" when the user logs in again. And if they reload the page, or even close the browser tab with the app but don't exit the browser -- then loading the app again doesn't prompt for a new login, it just carries on. So the app thinks the user still has the roles they had the last time they logged in. This seems to be a security risk, as if I deny a user a role-based permission through the Azure Portal, then they can still access that function in the app if they haven't closed their browser.
Is there something I can call in the Blazor code to re-load role permissions for the current logged-in user?

Getting Sign In Error in Tableau Server after Azure B2C authentication

I have a problem with my tableau server, I am tring to integrate Azure B2C authentication with tableau server through OpenId connect option in tableau server. Follow below steps to integrate :
Step 1. Open TSM in a browser:
https://<tsm-computer-name>:8850.
Step 2. Click User Identity & Access on the Configuration tab and then click Authentication Method.
Step 3. Under Authentication Method, select OpenID Connect in the drop-down menu.
Step 4. Under OpenID Connect, select Enable OpenID authentication for the server.
Step 5. Enter the OpenID configuration information for your organization:
enter image description here
Step 6. Click Save Pending Changes after you've entered your configuration information.
Step 7. Click Pending Changes at the top of the page:
Step 8. Click Apply Changes and Restart.
After changes apply when hit to tableau server URL, getting azure B2C login page. When login into Azure B2C after authentication it will redirect to Sign In Failed in tableau server page.

On-premise Active directory login using LDAP and SSO

We are developing a ReactJs and NodeJs application where node has to authenticate AD users using LDAP.
We are able to complete the authentication successfully using LDAP,
But the requirement is, in On-prem users are already logged in to the AD and if they open our web it should login without asking credentials again, it it is not happening with LDAP integration.
Can some one please help me.
Thanks in advance.
To add SSO in on-prem Active directory login using LDAP, please follow below steps:
Go to Administration -> Applications and enable Single Sign-On -> click setting -> select LDAP method.
If you want your users to login without using credentials again, set the option to use only SSO authentication only.
UseResponse internal account is created, when a new user logs in against the LDAP server. If you don't want to send internal registration credentials, Disable Registration Email.
In addition to these, include basic settings of your connection:
Give hostname or IP of your LDAP server
Add ldaps:// to hostname when the server has secure connection
Give Base Distinguished Name for your AD with default value dc=localhost.
Enter administration credentials for the connection, if your LDAP server requires authentication.
For more in detail, please refer below link:
Using LDAP as a Single Sign-On (Active Directory) | Integrations | Help Center - UseResponse.

Trying to deploy msal4jsample in tomcat server

I am trying to enable auth for local web application using the sample provided in Azure (msal4jsample) and enable authentication using OAuth. The only available option is an implicit grant for a web app during Azure AD app registration.
Deployed it in tomcat successfully. I am able to get an Authentication prompt from Azure AD.
However, after successful login, it is going to the error page.
I have tried to debug the application by enabling logger, unfortunately log files are not getting created.
Any suggestions on this?

Unable to grant admin consent for app in Azure AD despite being Application Adminstrator

We have an account that is an Application Administrator, and with that account, we registered an App.
When attempting to add permissions both Application and Delegated, there would be a message saying it needs admin approval. When trying to give admin consent from the apps permissions page with the following image would pop up
The permissions we were attempting to give were:
-Microsoft Graph: Reports.Read.All
-Office 365 Management API: ServiceHealth.read
And these were both Application and Delegated
What Exactly is happening here?
Are we doing something wrong?
You need to login in your application with the Azure AD global admin account.(Application Administrator can not do this)
Or you can ask your Azure AD admin to grant admin consent on Azure portal.
Go to your application->API permissions-Grant consent.

Resources