Tagged Questions
3
votes
1answer
95 views
What are the benefits of federated identity management over bare bones public key encryption?
What are the main reasons for having a federated identity system such as OpenID over having identities based purely on a public key?
OpenID uses an Identity Provider to confirm that a user owns a ...
26
votes
5answers
2k views
Are GUIDs safe for one-time tokens?
I see a lot of sites use GUIDs for password resets, unsubscribe requests and other forms of unique identification.
Presumably they are appealing because they are easy to generate, unique, ...
0
votes
1answer
434 views
How can I decrypt ADFS-based SAML/p or WS-Trust claims?
I'd like to audit the claims that are sent to a client from a SAML/p or WS-Trust authentication.
What private keys do I need and how would I decrypt this information?
If it makes any difference, I'm ...
