Identity Security: The problem(s) with federation

Federating trust with an identity provider (IdP) is common practice to centralize identity governance. However, attackers can exploit identity federation to breach organizations or maintain persistence in a system. This blog post explores common attack vectors against federated identities and effective mitigation strategies.