Pass username and password adfs without using query string

pass username and password ADFS without using query string, Please help.
I used query string , but it is unsecured to pass credentials over url, with simple tool like httpwatch , anyone can easily get the password and decrypt it.

Hello MohitJainMJ,
You're not in the right forum. Here it's for FIM topics!
Regards,
Sylvain

Similar Messages

  • Pass username and password ADFS without using query string, Please help.

    pass username and password ADFS without using query string, Please help.
    I used query string , but it is unsecured to pass credentials over url, with simple tool like httpwatch , anyone can easily get the password and decrypt it.

    Hi,
    According to your post, my understanding is that you had an issue about the ADFS.
    As this issue is related to ADFS, I recommend you post your issue to the forum for ADFS.
    http://social.msdn.microsoft.com/Forums/vstudio/en-US/home?forum=Geneva
    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us.
    Thank you for your understanding and support.
    Thanks,
    Jason
    Forum Support
    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact
    [email protected]
    Jason Guo
    TechNet Community Support

  • How to retrieve WorkflowContext without passing username and password ?

    Hi,
    I have created a dynamic ApprovalGroup and inside this class i have the following private method.
    private IWorkflowContext fetchWorkflowContext() {
              IWorkflowServiceClient wfSvcClient =
                   WorkflowServiceClientFactory.getWorkflowServiceClient(WorkflowServiceClientFactory.LOCAL_CLIENT);
              ITaskQueryService queryService = wfSvcClient.getTaskQueryService();
              IWorkflowContext workflowContext;
              try {
                   workflowContext =queryService.authenticate("weblogic", "weblogic1".toCharArray(), null);
                   } catch (WorkflowException e) {
                   e.printStackTrace();
    But when i retrieve workflowContext, I have to pass username and password.As this dynamic ApprovalGroup class will be deployed on the same SOA server under D:\Oracle\Middleware111150\Oracle_SOA1\soa\modules\oracle.soa.ext_11.1.1
    I have kept wf_client_config.xml under D:\Oracle\Middleware111150\Oracle_SOA1\soa\modules\oracle.soa.ext_11.1.1\classes.
    <?xml version="1.0" encoding="UTF-8" standalone="yes"?>
    <workflowServicesClientConfiguration
    xmlns="http://xmlns.oracle.com/bpel/services/client">
         <server name="default" default="true" excludeFromFederatedList="true">
         <localClient>
              <participateInClientTransaction>false</participateInClientTransaction>
         </localClient>
         <remoteClient>
              <serverURL>t3://localhost:8001</serverURL>
              <userName>weblogic</userName>
    <password>weblogic1</password>
              <initialContextFactory>weblogic.jndi.WLInitialContextFactory</initialContextFactory>
              <participateInClientTransaction>false</participateInClientTransaction>
         </remoteClient>
         <soapClient>
              <rootEndPointURL>t3://localhost:8001</rootEndPointURL>
              <identityPropagation mode="dynamic" type="saml">
                   <policy-references>
                   <policy-reference enabled="true" category="security" uri="oracle/wss10_saml_token_client_policy"/>
                   </policy-references>
              </identityPropagation>
         </soapClient>
         </server>
    </workflowServicesClientConfiguration>
    How to retrieve WorkflowContext without passing username and password ?
    ============================
    workflowContext =queryService.authenticate("weblogic", "weblogic1".toCharArray(), null);
    ============================
    regards.
    Edited by: user10303338 on Oct 5, 2011 1:51 AM

    Use :
    Properties prop = System.getProperties();
    prop.put("proxySet","true");
    prop.put("http.proxyHost","yourProxy");
    prop.put("http.proxyPort","8080"); // change the port
    //prop.put("https.proxyHost","yourProxy");
    //prop.put("https.proxyPort","8080"); // change the port
    Denis

  • How to pass Username and password using Invoke to a webservice

    Hi Guys,
    Please tell me how can I pass Username and password using Invoke to a webservice, I am using SOA 11G.
    Thanks
    Yatan

    Hi Yatan
    I suppose you want to use basic HTTP authentication.
    Try to lookup in the SOA docs this property
    oracle/wss_http_token_client_policy
    http://download.oracle.com/docs/cd/E17904_01/web.1111/b32511/configuring.htm#WSSEC2261
    Regards
    Mihai

  • JMS Adapter (for DI) does not allow passing username and password to JMS connection

    Post Author: PLed76
    CA Forum: Data Integration
    JMS Adapter (for DI) does not allow passing username and password to JMS connection. It has those fields only for MSMQ. Our Production environment does not allow us to connect to JMS (we use Tibco EMS) anonymously, so it prevents us from use of Data Integrator. Is there any way to pass those params, or obtain the correct version of JMS Adapter, or obtain source codes of the JMS Adapter so we can correct them ourselves (we can send you the corrected sources back) ? Thanks in advance for any help. (PL)ed76 Renaissance Capital

    Bump - Were having the same issue.
    Has anyone found a way to connect to Tibco with a user/pwd?
    Version 14.0.297.

  • How to pass username and password with the portal url

    i want to access portal from my web site. i have created username and password fields in my web page. when submited , my portal page should open. so how to pass username and password with the portal url.

    This is not straightforward; but it is doable.
    First tell us about your portal version; portal 10.1.4 has a slightly different method of doing it and the pre-10g portals were completely different animals.
    And if you are in AS Rel 2, then the most important document for you would probably be the following:
    [Creating Deployment Specific Pages| http://download-west.oracle.com/docs/cd/B14099_19/idmanage.1012/b14078/custom.htm#i1015535]
    You might want to use it in conjunction with some metalink notes about your portal version and such a login page.
    hope that helps!
    AMN

  • I have a iphone 5 and I can login with my apple id to purchase music. However, when I try to login into icloud using the very same username and password that I use in the apple store it does not work to enter icloud, so what what gives???

    I have a iphone 5 and I can login with my apple id to purchase music. However, when I try to login into icloud using the very same username and password that I use in the apple store it does not work to enter icloud, so what what gives???

    I could do that, however when I select the icloud button (or whatever the heck it is) I am asked to enter the apple id and password. So if you are suppose to create another one for icloud you'd think it would give you the option at this point which would be logical.

  • Im trying to listen to a book and it keeps telling me I need to enter my audible account username and password.  I used my apple id and it is not working anyone know what to do?

    Im trying to listen to a book we downloaded from amazon.  When we click on it it says we need to enter out audible username and password.  I used my apple id username and password and it says it is not correct.  I reset this and used it again and it still does not work.  Any ideas?

    Launch iTunes. From the menu bar click Store / View My Account then click Edit Payment Information.
    Make sure the Security Code for you credit card is available and the expiration date is correct, then click Done.

  • How can I pass username and password in a client bean to call a webservice?

    Hi,
    I have created a Client Java Bean for a web service (an automatically created Service from a Bapi) that requires username and password. How can I pass username and password in the code?
    Thank you!
    Julia
    This is my code:
    public Z_FlightGetlist port;
    Business Method.
    public String test1234() {
    try{
    BAPI_FLIGHT_GETLIST list = new BAPI_FLIGHT_GETLIST();
    list.setAIRLINE("KLM");
    port.BAPI_FLIGHT_GETLIST(list);
    return "ok";
    catch(Throwable e){
    return "error"+e;
    public void ejbCreate() throws CreateException {
    try{
    InitialContext ic = new InitialContext();
    Z_FlightGetlistService s = (Z_FlightGetlistService)ic.lookup ("java:comp/env/FlightProxy");
    Z_FlightGetlist vi = (Z_FlightGetlist)s.getLogicalPort(Z_FlightGetlist.class);
    this.port = vi;
    catch(Throwable e)

    Hello Julia,
    Check this document
    http://help.sap.com/saphelp_nw04/helpdata/en/50/a5d13f83a14d21e10000000a1550b0/frameset.htm
    Best regards, Maksim Rashchynski.

  • Possible to Pass Username and Password to ADF URL?

    Hi,
    We are building a cache flow for pre-caching some pages after a server bounce. Ideally, rather than go through the sign on page, we could have direct urls for our program to execute for our test user that would include username and password. As we are not concerned with security in this environment, we are ok with having such a solution for this particular use case.
    Are there delivered parameters with all adf apps that would allow us to construct such a URL?
    Thanks!

    I know you aren't worried about security, but it's worth understanding that HTTPS will hide the URL parameters:
    http://blog.httpwatch.com/2009/02/20/how-secure-are-query-strings-over-https/
    As noted in the article the parameters can still "leak", but HTTPS provides you a mechanism to at least hide the parameters from network sniffers which are incredibly easy to install on the network (and remembering most security breaches come from within an organisation, not outside).
    CM.

  • Passing username and password through the URL (SharePoint integration)

    Dear friends
    I have a requirement to integrate MS SharePoint with Jsp application site. user has to login to the Sharepoint first then from link (URL) i want to pass the username and password from
    that link to login into the jsp site without showing the login page !!

    SharePoint with Jsp application site. user has to login to the Sharepoint first then from link (URL) i want to pass the username
    and password from that link to login into the jsp site without showing the login page

  • Passing username and password in JInitiator

    Is there any way to pass my username and password in embed or object tag so that I don't have to type it when I am connected to the oracle application.

    It appears the only way to parameterize the Applications username and password in Web forms is to use either
    a cartridge implementation or javascript. I found the following document on Metalink describing the
    javascript solution:
    http://metalink.oracle.com/metalink/plsql/ml2_documents.showDocument?p_database_id=NOT&p_id=106048.1

  • Passing username and password while calling the simple HTTP API

    Hi,
    I want to execute a graph by calling the http api from a java code. However, this gives me a 401 unauthorized http error as I am not passing the username and password to the clover http url.
    The following is the format of the constructed url. - http://<host>:<port>/clover/simpleHttpApi/graph_run?sandbox=<sandboxname>&graphID=graph/Baseline.grf&verbose=FULL
    Can anyone suggest how to pass user credentials to this url.
    Thanks

    Brett,
    Thanks for the response.
    The idea is to run the baseline graph using the simple http api and get the run id of the job. Then I plan to call
    this url - http://<host>:<port>/clover/simpleHttpApi/graph_status?runID=1310924&returnType=STATUS_TEXT&waitForStatus=FINISHED_OK by passing the obtained run ID of the previous job dynamically to this url. This status has to be read and printed on the screen. Now all this is easy to write using java and executing the java class using the JAVA EXECUTE component of Integrator ETL 3.1. My only problem is how do I pass the user credentials.
    Thanks

  • How do I pass username and password to the Citrix client via netlet

    I have managed to call a Citrix managed application from the portal via netlet (via InitialProgram within citrix_start.html) - thankyou William Geurts.
    How do I use the Portal's single sign-on functionality to pass the username and password through to Citrix via netlet?

    Hi,
    This can be done by writing a small application that will pull session/user info from Portal and then pass it on to another app as needed.
    Thanks,
    Raj_indts
    Developer Technical Support
    Sun Microsystems
    http://www.sun.com/developers/support

  • SQL getConnection doesn't pass Username and Password

    I am trying to connect to a secure Microsoft Access database.
    I connect to the database but the username stays as Admin with an empty password. And unfortunitly Admin doesn't have the permissions that I need.
    This is part of my code:
              Properties DBCreds = new Properties();
              // Put the Username and Password into the properties
              DBCreds.setProperty("user", STRING_USERNAME);
              DBCreds.setProperty("password", STRING_PASSWORD);
              // Get the database driver
              try
                   Class.forName("sun.jdbc.odbc.JdbcOdbcDriver");
              catch (ClassNotFoundException e)
                   e.printStackTrace();
                   System.out.println("Class not found for the JDBC to ODBC Driver.");
                   System.exit(1);
              // Connect to the databases
              System.out.println("Starting Connections to the Databases");
              System.out.println("Database: General Tables (" + DATABASE_GT + ")");
              try
                   conn_gt = db.getConnection(STRING_DBCONNECT + DATABASE_GT,DBCreds);
                   sql_gt = conn_gt.createStatement(ResultSet.TYPE_SCROLL_SENSITIVE,ResultSet.CONCUR_UPDATABLE);
              catch (SQLException e)
                   e.printStackTrace();
                   System.out.println("\nERROR: Failed Connection to General Tables");
              }Yes I am using a Properties varible to pass the username and password but I have also tried using the getConnection(URL,USERNAME,PASSWORD) and it didn't work.
    Any help would be greatly appreciated.

    Hard code the connection string and the user,
    password using getConnection(String url, String user,
    String password). Still is admin
    Make sure that the meta data call is right after the
    connection call.It is.
    Once you have done that then run again and see what
    the meta data returns.Still Admin
    If it still returns admin then I would suppose that
    the meta data is going to return that regardless of
    what you do. (I would suspect that this might be the
    case.)Maybe but the thing is it is only using the Admin security settings while I need to use the USERNAME security settings
    If it returns the correct name then I would suppose
    that either you are setting up the properties wrong
    or the getConnection(String url, Properties info)
    doesn't work.Ok here is my problem revised... Admin doesn�t have read properties on the Zonas table, but the username that I have does. The part of teh code that is failing is:
              System.out.println("Opening Zonas table");
              try
                   missionaries = sql_gt.executeQuery("SELECT * FROM Zonas");
              catch (SQLException e)
                   e.printStackTrace();
                   System.out.println("FAILED!!\n" + STRING_DBCONNECT + DATABASE_GT);
              }The output is:
    java.sql.SQLException: [Microsoft][ODBC Microsoft Access Driver] Record(s) cannot be read; no read permission on 'Zonas'.
    at sun.jdbc.odbc.JdbcOdbc.createSQLException(JdbcOdbc.java:6958)
    at sun.jdbc.odbc.JdbcOdbc.standardError(JdbcOdbc.java:7115)
    at sun.jdbc.odbc.JdbcOdbc.SQLExecDirect(JdbcOdbc.java:3111)
    at sun.jdbc.odbc.JdbcOdbcStatement.execute(JdbcOdbcStatement.java:338)
    at sun.jdbc.odbc.JdbcOdbcStatement.executeQuery(JdbcOdbcStatement.java:253)
    at Map.main(Map.java:77)
    FAILED!!
    jdbc:odbc:Driver={MicroSoft Access Driver (*.mdb)};DBQ=p:\general tables.mdb

Maybe you are looking for