-
When %53AMLResponse is not SAMLResponse: the Keycloak SAML redirect signature bypass
What happened? How the trick works Who is affected? What you should do now Conclusion Hi there, If you run Keycloak as an identity broker in front of SAML identity providers, please stop reading for a second and check your version. Done? Great. Then let’s talk about one of the...
-
AI in IAM – Hype, Hope, and Hard Reality
AI is everywhere. Literally everywhere. Refrigerators are suddenly “smart,” slide decks write themselves, and every second product now claims to be “AI-powered.” Naturally, Identity & Access Management couldn’t escape the wave. So let’s take a calm (but not humorless) look at AI in IAM: what actually helps, what’s mostly marketing,...
-
Please choose strong passwords!
Why (would I choose) strong passwords? Password Manager? Conclusion Hi there, Over the past few months, since getting married with my beautiful wife, I’ve been able to gain a remarkable insight about password security. Not out of curiosity, but rather through the amusing revelation of my wife’s “creative” password choices,...