13How do SAML single sign-on and Kerberos work at a high level, and where is trust anchored?▼mediumNewMicrosoftGoogleMeta◆ premiumTwo enterprise workhorses with very different designs. The scored answer explains each flow, where the trust lives, and the attacks that follow from it.Open full answer →
26SAML single sign-on keeps producing critical vulnerabilities. What goes wrong in service providers, and how do you review an integration?▼hardNewMicrosoftGoogleSalesforce◆ premiumThe signature verifies, and the application reads a different element than the one that was signed. Most SAML bugs are some version of that sentence.Open full answer →