Presented by
About this talk
Join Jenko Hwong at DEF CON 31 Cloud Village for “SSO Sloppy, SSO Suspect, SSO Vulnerable” to understand how inconsistent and flawed implementations of SSO protocols can be abused by attackers who use REST APIs to gain near-permanent access, bypass MFA challenges, and gain broad access to user apps and data.