SSO

SASE, SAML & Modern Identity

SASE, SAML & Modern Identity: Part 3 — OIDC & OAuth 2.0

Part 3 of 3. Parts 1 and 2 covered SASE architecture and SAML. This one is OIDC and OAuth 2.0: the token-based identity framework that powers most modern authentication. There's a lot of ground to cover — stick with it through the token anatomy section, because everything else

SASE, SAML & Modern Identity

SASE, SAML & Modern Identity: Part 2 — SAML 2.0

Part 2 of 3. Part 1 covered SASE architecture. This one is SAML 2.0 — how federated identity actually works, what the assertion contains, how the flows run, and where it breaks. The vulnerability section is worth reading even if you're not a security engineer. These attacks show