Tagged Questions
4
votes
2answers
531 views
Are some STS token formats better than others (SAML vs SWT vs JWT)
I'm configuring an Azure ACS STS and would like to know if there is any impact on security based on the following token formats or how they are used.
The corresponding help link takes me to MSDN ...
0
votes
1answer
414 views
How do I change the certificate of a Shibboleth service provider?
How do I change the certificate of a Shibboleth service provider? I have an existing identity provider (IDP) and service provider (SP) and I need to replace the certificate with a Verisign signed ...
1
vote
1answer
146 views
How can a SAML Relying Party redirect to one of two IDPs?
We need to support the following Authentication flows
User 1 logs into Salesforce using Salesforce Credentials
User 2 logs into Salesforce using Arcot +Ping + Siteminder credentials
User 2 logs into ...
0
votes
1answer
512 views
What are the potential vulnerabilities in a SAML-based SSO approach?
What level of access would an attacker need to obtain to compromise a SAML-based SSO system?
Would stealing the private key used to sign SAML requests be enough? What if an attacker had root on the ...
