Be whoever you want to be: Single sign-on systems can be improved

Web shops, Cloud Computing, Online CRM systems: Each day many IT systems require the user to identify himself. Single Sign-On (SSO) systems were introduced to circumvent this problem, and to establish structured Identity Management (IDM) systems in industry: Here the user only has to identify once, all subsequent authentications are done automatically. However, SSO systems based on the industry standard SAML have huge vulnerabilities: Roughly 80 percent of these systems could be broken by the researchers from Ruhr-Universität Bochum.

Read the whole article on Physorg

More from Physorg