4 ms·
Just be careful that it's now not too easy for users to log in...
by yrro 5y ago
Just be careful that it's now not too easy for users to log in...
- donalhunt 5y agoYou can configure the application side to re-request authentication. This is similar to how Google requires you to sign in with a password when accessing sensitive endpoints like passwords.google.com.
- yrro 5y agoOh, I only meant that with SAML, the SP has to deal with maliciously-constructed assertions. A buggy SP (and as the comments on this article show, these are common) can be fooled into allowing an attacker to bypass authentication. Thereby making it a little bit too easy for users to log in. ;)