SSO Wars - The Token Menace

SSO Wars - The Token Menace

Explore the world of Single-Sign On (SSO) security in this 22-minute Black Hat conference talk. Delve into the state of SSO bugs in 2019, examining the false sense of security in the Auth Federation. Uncover new vulnerabilities lurking in major implementation libraries and their potential for large-scale attacks. Learn about authentication, token parsing, Windows Communication Foundation, and Windows Identity Foundation. Gain insights from security experts Alvaro Munoz and Oleksandr Mirosh as they discuss the ongoing battle against SSO vulnerabilities and their implications for the future of authentication security.