Easy rundown for ’Your 2FA is mine also’ | CVE-2018-8340 | AD FS Security Feature Bypass Vulnerability
Here is a short rundown of the vulnerability described by MSRC as discovered and described in this detailed Blog by OKTA researcherLue lisää
Tekijä: Joosua Santasalo
Don’t try this at home (Or configuring AD FS against Azure AD Domain Services)
Fair warning: While I have disclaimer in the bottom of the page, and blog title basically emphasizes it… DoLue lisää
Cheat sheet: AD FS and Azure AD Hybrid Conditional Access
What is so great about AD FS 2016 + Azure AD Hybrid Device Join? You get absolutely the best SSOLue lisää
Don’t try this at home (or how to enable Core Server Remote Management for AD FS GUI)
I’ve been running AD FS on Core servers for some time now, mostly because I like the smaller footprint and centralizedLue lisää
Azure AD Federation with KEMP
My earlier blog post ’The yellow box’ was about using AD FS as IDP and KEMP as SAML Service Provider. In thatLue lisää
SecureCloudBlog 