Collaborate Disseminate
I see "multiple set of credentials" and "single set of credentials" in the SSO documentation. However, I can’t understand what the difference is between them.
Are they related to MFA?
I try to understand how the integration we are using with OpenID works. I have read documents and different websites, but I feel that something escapes me related with SSO – I didn´t find so much information about this. If you could help m… Continue reading How SSO with OpenID and Azure AD works?
Let’s say we have a web application with SSO/OIDC implemented and there are multiple authentication providers.
The workflow so far:
Click "Login via Microsoft"
Enter your email-address.
Forward to the corresponding authenticatio… Continue reading Single Sign-On: multiple authentication providers [migrated]
I’m trying to implement SSO between a custom app and Microsoft 365 so that when the users hit any link to Teams o SharePoint Online in the Liferay app, ADFS doesn’t ask for credentials. Context:
ADFS is owned by corp global IT team and c… Continue reading Implement SSO between a custom app and Microsoft 365 with custom identity provider [migrated]
In the past decade, digital transformation has become a buzzword in nearly every industry. Organizations have scaled down workforces in favor of automation, moved their servers and networks off-premises, and transferred their data to the cloud, but mos… Continue reading Are your cybersecurity investments making you less resilient?
My company has one SSO provider that we use for our back office apps. We’re looking at tightening security for our SaaS offering. We have a fork in the road for implementation – we can either continue using non-SSO (Spring Security) and … Continue reading Is using the same SSO for dev and prod considered safe?
Half of the top 20 most valuable public U.S. companies had at least one single sign-on credential up for sale on the Dark Web in 2022, says BitSight.
The post How to protect your organization’s single sign-on credentials from compromise appeared first … Continue reading How to protect your organization’s single sign-on credentials from compromise
We are implementing SAML/OIDC-based SSO across our enterprise and wanted to get a feel for best practices when it comes to using Personal/Signer Certificates within our IdP.
Historically we’ve utilised the personal certificate that came wi… Continue reading IdP Personal/Signer Certificates
I’m studying a lot about SSO but still having difficultly in understanding which flows need certificates and at which end(SP or IdP). Currently in my system, Salesforce is used as SP and Azure AD is used as IdP.
I understand IdP needs to s… Continue reading Using Certificates between IdP and SP
Our company’s customers can use our IdP to sign-in into about a dozen various service providers we make available. All are third parties running their own sites/domains. We periodically get complaints that signing into Service A doesn’t au… Continue reading Automatic single sign-on for multiple providers