Hi everyone, since Ory has no plans to support SAML https://github.com/ory/kratos/issues/275#issuecomment-1807902578 The recommendation is to use jackson to be used as a “bridge” to connect SAML IdPs. But I’m confused as to how I plug this in to Kratos? Do I create a Generic Provider that points to by hosted jackson service? That’s the only way I understand that this would plug in to the self-service flow to create a session cookie but it looks like the clientId and secret are required in the configuration which is not something I am provided when setting up jackson 🤔 An earlier comment says here that this is how Ory Network manages things with jackson, is it possible to show that implementation? Thank you!!

Hello mates! 👋 Thank you for all the efforts to release such a product in the open-source community. I have a platform that contains multiple applications accessed via sub-domains. To handle access, we are using a custom join page that syncs with our LDAP server, which is used for authentication and authorization in all applications. Now, I am looking to migrate all of this to Ory self-hosted solutions. I want to know if it's possible to achieve the same with Ory solutions. I am willing to keep LDAP as backend, even though I know it's not supported yet, but I am willing to contribute to adding this feature. I also have a question about cross-subdomain authentication. Is it possible for a user to log in once and have a token valid for all sub-domains, which can be used to later check access authorization? Finally, what do you think I need to deploy to cover all of this while having Single Sign-On (SSO) and being an internal SSO provider? Thank you!

Hi everyone - we have a number of clients who wish to use their IdPs (OIDC/SAML) to login into our application and we are investigating if we can use Ory-* for that use case. Social logins are also on the cards in the future. I've been tinkering in the console and managed to set up a couple of test OIDC applications to play with. Now the github flow works as expected; Choose github - accept - and then forwarded to my application (and I see a basic user created in Ory) didn't even see a registration screen. 🎉 However my google app seems to hang on the Ory registration screen with all the fields populated so I don't know why it didn't just auto register the user like github and forward on to the application; clicking continue causes it to keep looping. I've probably set it up wrong but I've got no feedback to know what it is. In the case of Github, which is working as expected, how do I work out the identity of the logged in user? Do I need to make a call/request to the *.oryapis.com to get the logged in identity (since there is a cookie). During talks with some Ory people earlier this week there was mention of grabbing a JWT and I am sure I saw some config related to that in the console when I first logged in but for the life of me I can't find it now. 😞 Sorry for all the questions and feel free to point me to the right channel.

Hi all, I'll be starting to test Ory products to add authentication/authorization to our product. For browser sessions we'll be using Kratos (cookie seesion) to manage users auth. What is recommended for restful apis? Should we use hidra for that?

seems it’s not a valid jwt token, not sure why

Hi team I am using fosite to sign a access_token, but the token is kind like

ory_at_q62i46zcTh6q4WjWd_HXWS9zc54YikLqN1N17UXVGto.G03obdimctKhZIf-97ml6mxhNhLjhAX5sXwpyqpyYw0

Hello all I am reading the documentation for ORY and i keep seeing "ory.FrontendApi....." I write golang and want to use the ory for my api's, does this mean i have to write my own sdk for the api? Or is there any already provided Thanks

Can I connect via grpc to ory cloud? keto specifically?

I

Hi, How can I add device authorization flow for a CLI program using an already existing Kratos setup? I would like to generate a link to the main website login page and have the same login process there and have the CLI to be authenticated in the end. Is that currently possible? Thanks!

Hi, Ory community! I'm working on the logout function for my react-native app, and also for the web version of it. I'm following the user logout documentation and I'm having problems on the native version

performNativeLogout

function. (Web version works ok) I'm not sure from where to get the the session token parameter. I have tried with the "access token" and "id token" strings but those are not working.

import { Configuration, FrontendApi } from "<@U010S8T03NG>/client"  
  
const frontend = new FrontendApi(  
 new Configuration({  
 basePath: `https://${process.env.ORY_PROJECT_SLUG}.<http://projects.oryapis.com|projects.oryapis.com>`,  
 }),  
)  
  
export async function logout(token: string) {  
 return await frontend.performNativeLogout({  
 performNativeLogoutBody: {  
 session_token: token,  
 },  
 })  
}

On login, I use {project}/oauth2/token and the response is the one from the image Can I get some help on this? Thanks!

Hi, how can I close my Ory account. I haven't used it in over a year and you keep deducting $29 every month. The change plan button does absolutely nothing

How can we implement multitenancy using multiple Kratos instances and a self-service Node.js UI?

Is it possible to run multiple instances of Kratos that point to the same self-service login UI node? or vice-versa

Hello everyone, I started with investigating and integrating almost all Ory possibilities for POC project. I am trying to integrate Ory frontend example (react-spa), Ory Kratos, Ory Oathkeeper and Ory Keto. Currently I am facing a challenge where I want to add some property inside identity schema and to hide them on register (couldn't find a way to set input as hidden through identity schema). This data I want to use for role management that I will authenticate in Ory Oathkeeper and add permissions inside Ory Keto. Is it possible to find some kind of fast solution instead of re-writting frontend side of my own ?

Hello, I'm new to ORY. I'm trying to integrate Kratos and Hydra together on my local kubernetes cluster for POC. Are there any documentations for the walkthrough?

If you want a fully phone-based app you probably want to look at https://datatracker.ietf.org/doc/html/rfc7636

@some-bear-63847 I think the question you are really asking here is what is is the difference between a public and a confidential client. [ https://datatracker.ietf.org/doc/html/rfc6749#section-2.1 ] Which you could otherwise distinguish as something running on the user's hardware (e.g. phone) or something running on your hardware (e.g. a service in your cloud.) The security considerations are slightly different in each case.

Re kratos deploymenet to a browser based app - can any explain why I would want the selfservice microservice rather than just merging its functionality into the application's page Is it just keeping complexity compartmentalised, or is there a strong security reason for selfservice?

Hi, I am struggling for deploying ory in AKS kubernetes. None of the arguments for database migrations are passing and my containers are in continiously in error, crashloopback...I use kompose to convert docker-compose to yaml file but arguments used for migration are not working at all. Does someone had the same issue?

i am using ory self service ui node ,how can i modify it's ui, means i want to add background image to my login and registration page,how can i modify the ui?

I went to the youtube URL provided here and received a page on YouTube that the video is private.

hi, is there a document in the Ory documentation or a way to see what countries are supported by Ory via cli or console? We have one user who tried to sign up via email/password and we're looking at the "Cf-Ipcountry" in the context within an Ory action to see where this user is from, for analytical purposes. And we got an "XX" in the `Cf-Ipcountry". so, is there a way to see what countries are currently supported? Or if this is a minor one-time issue that popped up?

Thanks for attending Ory Summit, we had a blast 🙂 If you missed a session or want to rewatch: We will publish recordings of the Ory Summit in the coming days, with polished audio etc. You can subscribe to our Youtube for notifications here: https://www.youtube.com/@OryAcademy Will also post updates on Twitter, on here and on our website.

Hi Folks, Does anyone know if we can perform password less authentication using SMS instead of email, we required it for our mobile application. The doc do mention about one time code using email & sms. But there is only example of email & no example of SMS https://www.ory.sh/docs/kratos/passwordless/one-time-code https://www.ory.sh/docs/kratos/emails-sms/custom-email-templates Does ory support SMS or do I have to checkout other providers?

Hi Folks, Do we have any way to revoke access or refresh token without calling an API revoke token? Because we have backoffice that allow to terminate account from system and need to clear any data related to hydra such as • Auth session - I can do by using revoke auth session API • Consent session - I can do by using revoke consent session API • Access / Refresh token - We cannot do because we don't have any token store on backoffice side. Could you please help us for suggestion or any solution to achieve this.

#ory-summit channel is back for all questions/feedback/etc. before, during, after the Ory Summit!

Will the talks at the Ory Summit be recorded and available post the event?

Hi all. I'm planning to attend the Ory Summit virtually (California, U.S.). Does anyone have the times of all the talks?