topic Re: Credential submission detection with SSO in General Topics

Credential submission detection with SSO

Alberto.Espinosa — Wed, 18 Dec 2019 11:17:11 GMT

Hi,

Anyone knows if Credential submission detection works correctly with users that introduce the credentials via SSO in several webs?

the firewall is capable to identify every time the credentials were submitted on a new web via SSO?

I didn't find any mention to SSO in Credential submission detection and I have the doubt.

Thanks in advance!

Alberto

Re: Credential submission detection with SSO

S.Cantwell — Wed, 18 Dec 2019 19:16:32 GMT

I believe that the first time someone submits their credentials, the bloom filter function (needs to confirm the user is passing non-domain credentials). After this is done, then the SSO (on the back end) is authenticating the user vs the firewall.

So I think the answer i am saying (I believe) is NO, that the FW is only looking at the first auth request, not the SSO enabled sites, after the subsequent first one.