3 ms·
I worry that this thread dissuades people from doing SAML. For our business we do only do Identity Provider SAML and it works wonderfully. SAML has been a game
by jmann99999 5y ago
I worry that this thread dissuades people from doing SAML. For our business we do only do Identity Provider SAML and it works wonderfully.
SAML has been a game changer for us. We are a SAAS business and 80% of our help desk tickets were people who could not log in. SAML has largely fixed that for us.
- yrro 5y agoJust be careful that it's now not too easy for users to log in...
- donalhunt 5y agoYou can configure the application side to re-request authentication. This is similar to how Google requires you to sign in with a password when accessing sensitive endpoints like passwords.google.com.
- yrro 5y agoOh, I only meant that with SAML, the SP has to deal with maliciously-constructed assertions. A buggy SP (and as the comments on this article show, these are common) can be fooled into allowing an attacker to bypass authentication. Thereby making it a little bit too easy for users to log in. ;)