Collaborate Disseminate
I’m going to apologize in advance for the rambling nature of this question, I’ve read a lot about SAML and OIDC and other standards, just trying to understand why browsers seem to be so essential for them.
I’ve been doing s… Continue reading Is Browser based flows required for most IdP based Authentication standards?
Identity and access management (IAM) is a cornerstone of IT and has been for decades. Yet, with the majority of traditional on-prem IT infrastructure migrating to the cloud via vendors such as AWS® and GCP™ and applications shifting to the w… Continue reading Definition of Cloud Identity and Access Management (IAM)
I understand that GLUU uses Shibboleth for SAML. As going through the Shibboleth Protocols and interfaces, there doesn’t seem to be any support for SAML URI binding.
Does GLUU support URI binding? If so is there any document… Continue reading GLUU support for SAML URI binding
Oh, How Sweet It Is*… via the superlative Anitian Blog, and of course – writer Rick Osgood, comes this tremendous piece – titled ‘Owning SAML, in which, the p0wning of SAML, and the fix thereof, is revealed. It’s a great read, and highly receommende… Continue reading SAML, The p0wnage
With IT administrators shifting their infrastructure to the cloud, identity management must shift as well. This shift happens when we take identity management out of the office, traditionally encapsulated within an on-prem Microsoft® Active Direct… Continue reading Hosted Cloud Active Directory®
Hopefully this isn’t a complete duplicate. I’ve been reading articles and just can’t fully wrap my head around this. Many articles seem to having differing opinions.
I’m building a web app (Spa + backend Web Api). There i… Continue reading Asp.Net Web API correct usage of WS Federation for Web Application
Hopefully this isn’t a complete duplicate. I’ve been reading articles and just can’t fully wrap my head around this. Many articles seem to having differing opinions.
I’m building a web app (Spa + backend Web Api). There i… Continue reading Asp.Net Web API correct usage of WS Federation for Web Application
Exploiting a SAML Implementation During a recent web application test, I discovered a bug in a Security Assertion Markup Language (SAML) implementation. This bug involved an insecure implementation of a SAML feature combined with a custom authenticatio… Continue reading Owning SAML
Wanted to discuss the solution and options to refresh the IdP Session when user is actively working on the SP.
The use case is that after successful SP-Initiated SSO, there are two sessions in picture:
IdP (SSO) Session
SP Session
Whe… Continue reading SAML 2 | Refresh IdP Session when user is working on SP
I’m getting interested in Identity and Access Management (IAM), but I find it hard to find complete and understandable explanations that suit me, surely because I started wrong.
I began with Wikipedia and followed discussion… Continue reading How to get better IAM understanding