News for hackers. Stuff that matters.

A comment on Sign in as anyone: Bypassing SAML SSO authentication with parser differentials. Parent comment

Re:Sign in as anyone: Bypassing SAML SSO authentication with... by recursive on Sunday March 16, 2025 @12:14AM (#43376899)
There's an optional feature in the spec I think. But in my very limited experience, it is never implemented or working correctly.
[ Parent | on HN ]
Re:Sign in as anyone: Bypassing SAML SSO authentication with... by p_ing on Sunday March 16, 2025 @09:39AM (#43379009)
Microsoft implements this in Azure/M365.
[ Parent | on HN ]