Push Security identifies Cross-IdP Impersonation as a new tactic that threatens SSO security, enabling unauthorized ...
Cross-IdP impersonation exploits a flaw in SSO configurations by allowing attackers to create fraudulent IdP accounts matching an organization's domain, which are then used to access downstream apps ...