Query on shibboleth

[Alan Buxey]

hi,

Peter has already given the direct thing to look at but I'd recommend
reading this nice resource as it covers that issue and more:

https://mimoto.co.uk/sp/security/identity/infrastructure/2023/05/09/harden-shibboleth-sp.html

it was also covered in a security bulletin to some members of the global
research and education federations
e.g.
https://www.ukfederation.org.uk/content/News/2023-01-10-Shibboleth-SP-Open-Redirect
https://support.aaf.edu.au/support/solutions/articles/19000130194-is-your-sp-vulnerable-to-being-used-as-an-open-redirector

regards

alan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20240924/b94f7199/attachment.htm>