When I was using UAA 4.30.0, UAA used to log a lot of messages which was fine. However, I recently upgraded the UAA to 4.35.0 and the logging stopped working. I deploy UAA by getting the source from g

#uaa

hi Enrique, The port number will not be forced if the appropriate proxy headers are set *AND* the request comes from a trusted IP (Tomcat's RemoteIpValve) ie, the HttpServletRequest.getScheme does not

#uaa

Thank you, Filip. We are not using uaa-release, and we can control the protocol (https). Our issue is that the port number is forced to be 443 when we don't want that to happen. Regards Enrique

#uaa

request.getScheme() can return https properly if you configure the web server (Tomcat/Jetty) to trust the headers X-Forwarded-Proto based on the IP address of the proxy server. If you're using uaa-rel

#uaa

Hi We are running UAA behind an ingress controller on Kubernetes. The connection to the ingress controller is https on a port other than 443 e.g. 8443. The connection to UAA pod is http. The issue we

#uaa

I do not think UAA currently supports the draft-ietf-oauth-mtls-04 to use a TLS client certificate instead of using client-id/client-secret to authenticate the OAuth client. Is this or something simil

#uaa

Hi all, I want to create users in the cloudfoundary uaa for my web application.I am using the authorization code grant for that instead of redirecting to the client redirected url it is redirecting to

#cf #uaa #java

If you don’t have a SAML provider already in place, I would rather use Keycloak. The SAML provider we used was our customer’s Active Directory Federated Services. We used UAA to not have to integrate

#uaa #kerberos

Thanks, Camilo, that's very interesting and helpful. So, it's possible to do it, we just need to have a SAML provider integrated with Kerberos, and then we can integrate UAA with that SAML provider, i

#uaa #kerberos

We had discussions at Orange on how kerberos could help with browser less, password less experience with cf cli. IFAIK this would however indeed imply 1st class kerberos support in both cf cli and uaa

#uaa #kerberos

FWIW, I'm using UAA to federate authentication against a SAML provider that is already integrated with Kerberos. If that’s not possible for you, there is also https://www.keycloak.org/ which supports

#uaa #kerberos

Hi Enrique, UAA does not support Kerberos today, however, it supports OAuth/OIDC/SAML/LDAP. Thanks, Chao

#uaa #kerberos

Hi Has anyone got any experience integrating UAA with Kerberos? Basically, we are trying to obtain a bearer token from UAA by somehow providing a Kerberos ticket instead of client or user credentials.

#uaa #kerberos