Google Workspace and Entra ID Integration
Integrating Google Gemini Enterprise (or Gemini for Government ) with Microsoft Enterprise Platforms This involves much more than enabling single sign-on. It requires designing a secure cross-cloud architecture in which…
Authentication best practices for direct logins (username, password)
Direct Logins and MFA Direct Logins, MFA, and Modern Authentication: What You Need to Know In today’s digital landscape, securing user access is more critical than ever. While Single Sign-On…
Browser Only SSL versus PC Wide (System Wide) SSL
Browser SSL vs PC-Wide SSL Browser SSL vs PC-Wide SSL 1. Browser SSL Scope: Only applies to traffic inside the web browser (Chrome, Firefox, Edge, etc.). How it works: The…
Security concerns around SSO and Account Opening Flows
SAML Security Concerns: A → B → back to A SAML Security Concerns Threat Model User starts at Web App A → triggers SAML SSO to Web App B (SP)…
OAuth for Individual Users vs. Service Accounts — Q&A
OAuth vs. Service Accounts — Q&A Q. Is OAuth used for individual users or service accounts? A. OAuth is primarily used for individual users to authenticate and grant delegated access…
SSO with MFA – SaaS Service
SSO with MFA - for SaaS Services Q1: If a SaaS service supports SSO, does that automatically mean it supports MFA? Answer: No, it does not automatically mean MFA is…
Isolating Browser Sessions – In the Cloud and Locally
Browser Isolation Options for Whitelisted Site Access To isolate browsers so they only allow access to whitelisted sites, organizations can choose from several architectural options. Below are three major…
SAML-Based SSO: Source IP for IdP and SP Initiated Flows
SAML-Based SSO: Source IP for IdP and SP Initiated Flows SP-Initiated SSO Flow Summary: The user starts at the Service Provider (SP), which redirects them to the Identity Provider (IdP)…
Capturing a Second Factor Before Full Trust
Capturing a Second Factor Before Full Trust: A Smarter Onboarding Flow In most traditional account creation flows, users are granted full access right after setting up a username and password.…
Enforcing a Second Factor in Entra ID: How to Secure Users Who Never Had One
Enforcing a Second Factor in Entra ID: How to Secure Users Who Never Had One If a user isn’t using a second factor, they’re a risk. Many organizations still have…