Information Security
identigral's user avatar
identigral's user avatar
identigral's user avatar
identigral
  • Member for 4 years, 2 months
  • Last seen more than a week ago
Profile Activity
Stats
459
reputation
12k
reached
15
answers
0
questions
Communities
View all
About

As trusted advisors to large enterprises with strategic technology initiatives we use technology to produce measurable business outcomes

Core practice: Identity and Access Management (IAM). Fluent in SAML, OAuth, OpenID Connect, WS-Federation and more.

We like platforms. Much of our work is based on AWS, Azure, Google Cloud and Salesforce

Salesforce: core Platform, Sales Cloud, Service Cloud, Experience Cloud, Marketing Cloud + Pardot, Analytics, Einstein, Mulesoft

Badges
View all badges
This user doesn’t have any gold badges yet.
2
silver badges
8
bronze badges
Top tags
View all tags
11
Score
5
Posts
33
Posts %
10
Score
7
Posts
47
Posts %
7
Score
3
Posts
20
Posts %
5
Score
3
Posts
20
Posts %
5
Score
2
Posts
13
Posts %
4
Score
3
Posts
20
Posts %
Top posts
View all questions and answers
All Questions Answers
Score Newest
answer
3
What are the security implications using a Refresh Token in a SPA using Authorisation Code Flow + PKCE
Aug 2, 2019
answer
3
Service Provider that requires elevation
Dec 15, 2019
answer
3
Can OpenID Connect be used to implement social login?
May 12, 2020
answer
3
Logout on OIDC Provider Refresh Token validity in comparison to OAuth
Dec 12, 2020
answer
2
HTTP Response to a SAMLResponse POST by user agent
Jul 27, 2019
answer
2
Should a SAML Assertion whose SessionNotOnOrAfter value is exactly the same value as its AuthnInstant be treated as having an invalid session?
Apr 23, 2020
answer
2
Should password reset disable biometric sign in until the user signs in with username and password again?
May 12, 2020
answer
1
JSON Web Encryption (JWE): should one verify the alg and enc similarly to JWS alg whitelisting?
Jul 27, 2019
answer
1
Should OIDC introspection endpoint be used to validate the JWT access token?
Apr 3, 2020
answer
1
Is it ok to share relevant login information on an API's public endpoint?
May 28, 2020
Top network posts
View all network posts
36
How does JWT.io already know my public key?
29
When does JWK expire? JWKS rotation policy
20
Named Credentials - What is the difference between JWT & JWT Token Exchange
14
Dynamically setting an object field value in Apex
12
Can SAML do Authorization?

Your privacy

By clicking “Accept all cookies”, you agree Stack Exchange can store cookies on your device and disclose information in accordance with our Cookie Policy.