SAML: A Fractal of Bad Design

(blog.trailofbits.com)

31 points | by aray07 57 minutes ago

1 comments

  • ocdtrekkie 21 minutes ago
    Eh, if you don't have SAML support, I can find a product that does. Not a problem. \o/

    (Or to be more clear, it is mostly unacceptable for an enterprise product to have opinionated decisions about what authentication it works with. You either work with what we use or you are not viable as a product for our need. It's kinda simple. I would expect someone whose authentication was OIDC-based to be similarly dismissive if you told them you only would do SAML.)

    • jeltz 8 minutes ago
      That mindset is indicative of security theatre to me. But as security theatre is common in entrprise IT that does not surprise me.