vf-tyler Posts - Answer Overflow

vf-tyler

•Created by vf-tyler on 5/22/2025 in #questions-help-bugs

Project Grant Deactivation Access Restriction

Hello, I'm looking to confirm if the following behavior is expected: Deactivating a project grant for an organization does NOT remove access to that project for all users in the organization. - If the above statement is true, is there another way to holistically remove access to a project for all users of an organization without having to deactivate every user's grant? - Is the intended way to do this by removing the project grant altogether?

9 replies

ZZITADEL

•Created by vf-tyler on 5/2/2025 in #questions-help-bugs

v2beta/actions/* 404 with Actions V2 feature enabled

13 replies

ZZITADEL

•Created by vf-tyler on 8/20/2024 in #questions-help-bugs

Actions V2 Documentation 404

Are there alternative links to any of these resources listed on the ActionsV2 page? https://zitadel.com/docs/apis/resources/action_service_v3/action-service-list-execution-methods https://zitadel.com/docs/apis/resources/action_service_v3/action-service-list-execution-services

18 replies

ZZITADEL

•Created by vf-tyler on 8/15/2024 in #questions-help-bugs

SAML Application XML Error: "failed to find registered serviceprovider"

I have a ZITADEL Application within a Project configured with SAML authentication and I am attempting to start the login process using https://<ZITADEL-DOMAIN>/saml/v2/SSO. I am using the saml2-js (https://www.npmjs.com/package/saml2-js) library to generate the XML requests and this is the XML it sends as the SAMLRequest query parameter (deflated and base64-encoded in reality). All instances of the ZITADEL domain have been replaced with <ZITADEL-DOMAIN> for the sake of sharing.

<?xml version="1.0"?>
<AuthnRequest
    xmlns="urn:oasis:names:tc:SAML:2.0:protocol"
    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Version="2.0" ID="_4d3cdb03fbfe470b1c0c9968587de81b2dc92d93c2" IssueInstant="2024-08-15T17:26:18.024Z" Destination="https://<ZITADEL-DOMAIN>/saml/v2/SSO" AssertionConsumerServiceURL="http://localhost:3000/api/auth/signin/sana-saml" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST">
    <saml:Issuer>https://<ZITADEL-DOMAIN>/saml/v2/metadata</saml:Issuer>
    <NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" AllowCreate="true"/>
</AuthnRequest>

<?xml version="1.0"?>
<AuthnRequest
    xmlns="urn:oasis:names:tc:SAML:2.0:protocol"
    xmlns:saml="urn:oasis:names:tc:SAML:2.0:assertion" Version="2.0" ID="_4d3cdb03fbfe470b1c0c9968587de81b2dc92d93c2" IssueInstant="2024-08-15T17:26:18.024Z" Destination="https://<ZITADEL-DOMAIN>/saml/v2/SSO" AssertionConsumerServiceURL="http://localhost:3000/api/auth/signin/sana-saml" ProtocolBinding="urn:oasis:names:tc:SAML:2.0:bindings:HTTP-POST">
    <saml:Issuer>https://<ZITADEL-DOMAIN>/saml/v2/metadata</saml:Issuer>
    <NameIDPolicy Format="urn:oasis:names:tc:SAML:2.0:attrname-format:basic" AllowCreate="true"/>
</AuthnRequest>

8 replies

ZZITADEL

•Created by vf-tyler on 8/14/2024 in #questions-help-bugs

Assigning IAM roles to Service Users

What is the best way to assign an IAM role to a service user? My goal is to make calls to the Management API with permission to set user metadata for any user across the instance.

5 replies

Gaming

Programming