Closed rohitgaikwad09 closed 11 months ago
Thanks for your report. Unfortunately, this is not the right repository for questions about SSO integrations, this is for reporting issues with the Operations Manual. As SSO is an enterprise feature I would suggest in the first instance, the best way to get assistance with it is to open a support ticket with Neo4j support if you are able to do that.
Hi Team,
We are working with Neo4J SSO integration with PingFederate 11.x, However we 're getting an exception & have some queries on this setup.
1) Does Neo4j supports SSO authentication and authorization through PingFederate as a identity provider implementing the OpenID Connect (OIDC) standard?
As per this documentation, it is mentioned support for Okta, Azure, Google etc.
2) Need to know whether Neo4j SSO authentication and authorization is designed to work only with Okta, Azure, Google only? As based on this documentation the configuration is provider-specific using prefix represented by
<provider>
.Based on this below OIDC configuration is created for PingFederate:
Also, tried using below configuration for PingFederate:
3) We are getting an exception at Neo4j end as below, Moreover the Neo4J does not makes any request to PingFederate Idp as exception comes at Neo4J end:
While using JWT token:
Note: The user
demo
is stored in LDAP which is configured as a data store at PingFederate end.4) For PingFederate IdP will there be a need to implement a custom auth provider for Neo4j like this? If yes then can you please provide a documentation reference or OOTB SSO solution from Neo4J will work?
5) We have enabled below loggers at Neo4J end, But these loggers are not helpful to debug the exception, Can you please suggest any additional loggers for this exception:
Thanks, --Rohit