Viewing profile — sophiabannet1

Great post! The impersonation vs. delegation framing is spot on. Even in enterprise SSO, proper delegation is clunky. We've toyed with OAuth 2.0 Token Exchange (RFC 8693), but supp…

Nice move by Supabase switching to asymmetric JWTs, eliminating the need to always call getUser() for verification should noticeably reduce latency at the edge; curious if anyone’s…

This is a cool idea, so many keyword tools feel unnecessarily gated these days. Love that this removes friction: no signup, instant results, and CSV export without paywalls sounds …

We have reached a point where most B2B SaaS companies support SSO, but there is still a lot of confusion around which protocol to choose: SAML or OIDC. Both serve the same goal and…

Just stumbled across something interesting: OWASP quietly released a new guide focused entirely on AI system testing. It's called the AI Testing Guide (AITG). Some of the stuff it …

A reminder that even MFA isn’t foolproof—app-specific passwords can be a weak link. This attack shows how trust and timing, not tech, were the real weapons. Best to avoid ASPs and …

because SSO is implemented using various protocols like SAML, OAuth 2.0, and OIDC, each with different use cases, data formats, and security models. Identity providers also have cu…

This is a fantastic breakdown of the real-world benefits of SSO—not just from the end-user perspective, but also from a developer and business standpoint. I especially appreciate t…

Excellent breakdown, this clearly illustrates why SSO is only half the story and PAM is essential for securing real privileged access.

A thought-provoking and realistic take on the evolving role of security engineers in the age of AI, versatility and orchestration are clearly the future.

A powerful reminder of why modern authentication must move beyond SMS—critical insights for anyone building secure systems today.

This is the funniest and most painfully accurate take on multi-factor authentication.

Totally agree, SaaS often shifts complexity rather than removing it, integrated platforms feel like coding with training wheels off.

Useful insight

[dead]

[dead]

[dead]