Single sign-on concentrates authentication risk — if SSO is compromised, every connected application is accessible. SSO security assessment covers: identity provider (IdP) security posture, SAML implementation flaws (signature wrapping, assertion replay, XML injection), OAuth/OIDC implementation vulnerabilities (token leakage, redirect URI manipulation, scope escalation), session management across connected applications (does logging out of SSO terminate all sessions?), and multi-factor authentication enforcement consistency across all SSO-connected services.
Technical
Single Sign-On (SSO) Security Assessment: When One Key Opens All Doors para empresas hispanohablantes
SSO simplifies authentication but concentrates risk. Testing SAML, OAuth, OIDC implementations for bypass and session vulnerabilities. Guidance for ES market.