A Pentester's Guide: Osint, Breach Dumps, and Password Spraying

Re:A Pentester's Guide: Osint, Breach Dumps, and Password Sp... by kasey_junk on Wednesday April 10, 2019 @03:30PM (#19627983)

Do you mean that your application you 'write' should support SSO early or that the applications you 'use' should?

That is are you talking about integrating your product with SSO or integrating your IT systems?

[ Parent | on HN ]

Re:A Pentester's Guide: Osint, Breach Dumps, and Password Sp... by tptacek on Wednesday April 10, 2019 @03:32PM (#19627998)

That, too! Especially if you have support personnel interacting with in-house applications, though putting those behind a VPN also goes a long way towards preventing account takeover on those applications.

But in general, the idea is that you want an SSO early so all the random SAAS applications you subscribe to can have a coherent security policy.

[ Parent | on HN ]