3 ms·
Callback restrictions only happen if the user is sent to a valid IDP. That's a protection later in the process, for a different target (getting a valid user to
by rendaw 2y ago
Callback restrictions only happen if the user is sent to a valid IDP. That's a protection later in the process, for a different target (getting a valid user token), not what I'm talking about here (stealing the user's IDP credentials).
- TheNewsIsHere 2y agoThe alternative would be to not use a third party IdP, but the issue of stolen end user credentials is still present.