Topics

#sso

Things I've written about #sso

Oct 19, 20267 min read
IAM Chapter 4: SAML 2.0 & SSO
The signed statement behind SSO, opened up: SP-initiated vs IdP-initiated flows, why SAML assertions resist replay, why certificate expiry is the most common SAML outage, and where the standard starts to break.
Oct 18, 20265 min read
IAM Chapter 2: Authorization, IdP & Directories
Being authenticated gets you in the door. Authorization decides which rooms you can open. Covers authorization vs AuthN, coarse vs fine-grained access, Active Directory, and how an identity provider makes SSO work.