Overview
Coursera Flash Sale
40% Off Coursera Plus for 3 Months!
Grab it
Learn about Single Sign-On (SSO) implementation challenges and security considerations in this 43-minute conference talk from the 38th Chaos Communication Congress (38C3). Explore how SSO protocols facilitate identity provider information sharing with services, while examining potential pitfalls in implementation that could compromise security. Discover the importance of asking critical questions during SSO setup, including how vendors handle authentication information and maintain security standards. Through real-world examples of common mistakes and creative failures, gain practical insights into proper SSO configuration, centralized user management, and consistent security enforcement. Master the art of identifying potential vulnerabilities by understanding both ideal implementations and ways systems can break, enabling you to better protect organizations from problematic SSO deployments.
Syllabus
38C3 - OMG WTF SSO - A beginner's guide to SSO (mis)configuration
Taught by
media.ccc.de