2 ms·
Got it. So, it’s a legit SSO process. Being able to control IP addresses has its advantages!
by mbreese 5y ago
Got it. So, it’s a legit SSO process. Being able to control IP addresses has its advantages!
- zrail 5y agoYep! As the author alluded to elsewhere in the comments, if you want to make _really sure_ that the user is a person in a browser instead of a rogue malware process on their machine you can combine this with a yubikey tap or webauthn attestation step.