The SolarWinds/Solorigate attacks used some concerning methodologies. One of them has been what is called the Golden SAML attack process. Security Assertion Markup Language (SAML) enables the exchange of authentication and authorization Read more...
Multiple SAML libraries may allow authentication bypass via incorrect XML canonicalization and DOM traversal Overview Multiple SAML libraries may incorrectly utilize the results of XML DOM traversal and canonicalization APIs Read more...
Golden SAML Attack Lets Attackers Forge Authentication to Cloud Apps A new technique called “Golden SAML” lets attackers forge authentication requests and access the cloud-based apps of companies that use Read more...
Centrify’s approach to IAM is more than SAML and SSO—it’s just what we’ve been waiting for We last checked in with Centrify back at Mobile World Congress, looking at their Read more...
Webinar – Introducing PingFederate 7.3 and PingAccess 3.1 – Updates to our Federated Access Management Platform Join Ping Identity product manager, David Gorton, and technical product manager, Scott Tomilson, for Read more...
Happy 10th Birthday SAML V2.0 This week marks the 10th anniversary of the adoption of SAML V2.0 as a standard for exchanging authentication and authorization data between parties. This is Read more...
Technology and Business Speed has Changed–So Must Identity and Access Management Compelled by competitive pressures and user demand, companies have embraced mobility and cloud. And even if companies haven’t embraced Read more...
OneLogin and the Cloud Security Alliance today announced findings from their OneLogin 2014 State of SaaS Identity Management survey, which was conducted to better understand the maturity of SaaS vendors Read more...
ManageEngine, the real-time IT management company, today announced that it has added SAML 2.0 support to Password Manager Pro, the industry-leading enterprise privileged password management solution. The move strengthens the Read more...
