Collaborate Disseminate
Russell Smith outlines two new features of Azure Active Directory Connect, Seamless Single Sign-On and Pass-Through Authentication.
The post Azure Active Directory Connect Makes Cloud Single Sign-On Easy appeared first on Petri.
Continue reading Azure Active Directory Connect Makes Cloud Single Sign-On Easy
Microsoft added a new feature to its authenticator app, allowing users to sign into their Microsoft account without having to enter their password. “With phone sign-in, we’re shifting the security burden from your memory to your device. Just add your account to the Android or iOS Microsoft Authenticator app, then enter your username as usual when signing in somewhere new,” Alex Simons, Director of Program Management at the Microsoft Identity Division, explained. “Instead of entering … More → Continue reading Microsoft users can ditch password-based logins for phone sign-in 2FA
I’m looking for ways of integrating ADFS as a IDP for a SAML2 service provider. I have already configured the SAML2 provider with the verification certificates etc. And we used “Add Relying Party Trust Wizard” to configure AD… Continue reading Can we configure ADFS for IDP initiated SSO [migrated]
Actually this question is irritating me because i can’t get a proper answer from anybody.. so can anybody help me on this
I read some papers about SSO security recently. Then I found that there are both OpenID-based Google ID SSO and SAML-based Google Apps SSO in the paper. Google.com is the IDP in both cases.
I know that the lastest version is… Continue reading Google SSO uses both OpenID and SAML?
I am thinking how to gain and analyze the information in the real SSO (request/response) messages, for some commercial SSO solutions.
The challenge is that most commercial SSO solutions are black-box or gray-box. I know the … Continue reading Is it possible to analyze real Single Sign-On (SSO) messages via network sniffing?
I have read the details of pure JSON web token (JWT), and found that it is signed (e.g. by SHA256) but not encrypted. Hence, attack can read the sensitive information by decoding the header and payload.
I am not very familia… Continue reading Is JSON web token further secured in OpenID, and how?
I have read the details of pure JSON web token (JWT), and found that it is signed (e.g. by SHA256) but not encrypted. Hence, attack can read the sensitive information by decoding the header and payload.
I am not very familia… Continue reading Is JSON web token further secured in OpenID, and how?
Are there operating systems that allow logging on to the device (laptop, tablet etc.) using claims based authentication?
Continue reading Claims based authentication to log on to a device
I provide a service in which users can store data, files, etc in an encrypted form.
The service that I have built has two applications for the user’s password with which they login to my service: 1) authentication and 2) the … Continue reading Encrypting data and SSO