Secure SSO Authentication: Strategies to Eliminate Vulnerabilities
summary
Covers vulnerabilities arising from weak authentication in large-scale applications and recommends secure SSO strategies. Compares SAML, OpenID and OAuth, explains interactions between Identity Providers and Service Providers, shows practical .NET implementation with third-party integration, and discusses SAML request/response formats, decoding tools, common misconfigurations, and OWASP-based best practices for secure SSO configuration.
AI-written summary · about
chapters (11)
- 0:00SSO authentication intro
- 2:51Security neglect consequences
- 4:16Main auth types today
- 5:40What is SSO
- 8:09SSO vs OAuth2
- 9:35SAML for SSO
- 12:50SSO in .NET
- 18:52SAML request/response
- 25:17SSO config errors
- 30:36Secure SSO tips
- 32:18Q&A
related talks
30mOMG WTF SSO: A Beginner’s Guide to Single Sign-On...
44mPresentation on Security Standards and Protocols
37mThe Seven Deadly Sins of Web Apps, or a Bit About SSO Bugs
18mOne Identity to Rule Them All
16mIs your SSO on point, or is it more like Single Sign-Oh-no?
55mYou Shall Not Password: Modern Authentication for Web Apps
57mSelf-Verifying Authentication – A Framework For Safer Integrations of Single-Sign-On Services
45mWhy We Should Kill Saml2