connect third party service to google assistant - actions-on-google

I want to develop some application for my Google Home but before I start coding I have to be sure if I can connect the Google Home with third party service for example:
Paypal
Amazon
I mean all service API that need an authentication like paypal popup or facebook popup or something similar.

Yes. You can use Account Linking with OAuth to have them log into your service through an OAuth service you control (such as Auth0's). That OAuth service can require them to login using Paypal or Facebook's sign-in services.

Related

how to configure Alibaba cloud SSO with Google Gsuite as the Idp

I need to add SSO support to our Alibaba account and we use Gsuite as our identity provider, I only see guides for azure directory and OKTA and I can't manage to get Gsuite to work. all I'm getting is:
Error: not_a_saml_app
Provided application is not a SAML app
I'm trying to use Alibaba's CloudSSO service to do this.

Google Workspace as a service provider does not send signed requests

I am trying to setup SSO with third party IDPs in Google Workspace admin console.
I am using SAP IAS as an IDP.
It works with the default configuration.
But if i mark the the SAML requests to IDP must be signed in SAP IAS then it fails saying "SAML requests are not signed ".
It seems Google as a service provider does not sign the requests ? is it a correct understanding or is there a way to enable signing of SAML requests in Google workspace admin console ?
Best Regards,
Saurav
When you use Google Workspace as Service Provider with a third-party IdP requests are not signed by default and I am afraid that setting is not available in Google's side at the moment.
I assume by signing both the request and response of your SSO flow you are looking to grant extra security to this process however if you really need to use Google services and the authentication is successful without the setting I would recommend to skip this for now.
Neither in the documentation nor in the Google Admin console section for third-party IdPs SSO you would find it, the setting is simply not there:
Google as Service Provider setup
I hope this information helps!

OAuth2 redirect URI for enterprise application

I'm working on an enterprise application and our UI is a web application. We are looking to add OAuth2 support and I don't understand what to provide for the redirect URI field to the OAuth provider.
For example, I have registered my app in github OAuth provider.
Homepage URL: https://localhost:7980/index.html
Authorization callback URL: https://localhost:7980/oauth_callback
Now this works fine with localhost as the hostname. But, when this application gets used by the customers they can install it on any of their boxes and invoke the web app from any device connected to our server via https://[hostname]:7980/index.html. In this case, if the customer wants to use OAuth2 authentication option, then I don't understand what should be the redirect URL. Obviously I cannot use localhost for redirect URL as the customer can access the web app from any machine. I wouldn't know the machine ip/hostname where the customers are going to be installing our server beforehand.
One suggestion was to use a server from our company which would handle redirect URLs for the OAuth2 authentication. Is this a good idea? Is there a standard way for handling the use case I have narrated above in OAuth2?

Need to provide both Basic Authorization and SSO on Bluemix Liberty server

I have a Java app running under Websphere Liberty on IBM Bluemix. I need to be able to authenticate users 3 different ways - Basic Auth, SAML SSO, and OpenAuth SSO, in that order.
I can set up the app to do Basic Auth (using custom code) or SAML SSO (using the Bluemix Single Sign On service), but can't figure out a way to configure it to handle both at once. (I haven't even looked into how to do OpenAuth yet.) If I configure the app to use the Bluemix SSO service, then my app never sees the incoming requests to check for a userid and password to try Basic Auth before the SSO service grabs it.
I tried changing the redirect URL in the SSO service to an endpoint inside my app, but then all I get is
CWOAU0062E: The OAuth service provider could not redirect the request because the redirect URI was not valid. Contact your system administrator to resolve the problem.
I can't be the only one that needs to do this. Can anyone tell me how they did it?

Configure Bluemix SSO service with BlueID/IBM ID authentication

We are trying to leverage BlueID/IBM ID authentication for our application deployed on Bluemix node.js instance. Is it possible to configure the Bluemix SSO service with Blue ID (OpenID) authentication. Right now I see support for SAML, Cloud Directory and some social networks. But I am really interested to know if the SSO service has support to use Blue ID authentication?
Bluemix Single Sign On does not currently support the standards for IBM ID login.