SAML bypass / signature attacks

[IAM David Bantz]

---------- Forwarded message ----------

http://research.aurainfosec.io/bypassing-saml20-SSO/

This was highlighted on SANS ISC podcast today and I thought I would share.

Nathan Zierfuss-Hubbard, CISSP
Chief Information Security Officer
-
Technology Oversight Services, University of Alaska
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20161201/f4015de4/attachment-0001.html>