4 ms·
You can configure the application side to re-request authentication. This is similar to how Google requires you to sign in with a password when accessing sensit
by donalhunt 5y ago
You can configure the application side to re-request authentication. This is similar to how Google requires you to sign in with a password when accessing sensitive endpoints like passwords.google.com.
- yrro 5y agoOh, I only meant that with SAML, the SP has to deal with maliciously-constructed assertions. A buggy SP (and as the comments on this article show, these are common) can be fooled into allowing an attacker to bypass authentication. Thereby making it a little bit too easy for users to log in. ;)