Collaborate Disseminate
We use ADFS within our organisation, and it is available via HTTP externally.
All of the applications we protect with ADFS are SP-initiated, so I want to disallow requests to ADFS other than SP-initiated SSOs. (e.g. https://adfs.mydomain.c… Continue reading Secure ADFS behind HAProxy
I have an IdP who produces metadata federation XML files where the <OrganizationURL /> element is empty. See the example below:
<Organization>
<OrganizationName xml:lang="en">Example Co</OrganizationName&… Continue reading Is an empty `<OrganizationURL />` within a Federation Metadata XML file considered invalid?
I have a free edition of Thycotic Secret Server for learning purposes. Rotating AD and Windows passwords is working great. RHEL, however, is another story.
Within Secret Server, I’ve added a new Unix Account (SSH) account. Put root in the … Continue reading Receiving "Connection Failed – Connection lost due to error 96258" error while trying to RHEL root password with Thycotic Secret Server [closed]
We are implementing SAML/OIDC-based SSO across our enterprise and wanted to get a feel for best practices when it comes to using Personal/Signer Certificates within our IdP.
Historically we’ve utilised the personal certificate that came wi… Continue reading IdP Personal/Signer Certificates