3 ms·
oauth, saml, oidc accomplish the same thing in a way more mature way, so if you’re already using SSO just do that instead of adding another point of failure..
by notaharvardmba 2mo ago
oauth, saml, oidc accomplish the same thing in a way more mature way, so if you’re already using SSO just do that instead of adding another point of failure..
- mjg59 2mo agoNo they don't - you're still giving the agent a static token that can be exfiltrated and used elsewhere.
- hmokiguess 2mo agodoesn't the token has an expiry window though? if you're using oidc/sso with aws for example it is short lived and can be revoked
- mjg59 2mo agoThe refresh token is often going to be good for a week, even if the access token isn't.