Tag: SSO
-
Rotate keys more frequently
Get ready to have to login all the fucking time: Access and identity tokens should be valid for no more than an hour, the report says, and expired tokens must be rejected outright by authorization services and policy enforcement points. On key management, signing keys for high-impact systems should be rotated at least every 90…
-
Coté Memo #11 – Why would MSFT buy LinkedIn? Lots-o-links too!
What’s more delightful than finding a cup of coffee you forgot about earlier in the morning? Bonus coffee, more than you thought was left. I have some trips coming up, not least of which is the week in Poland. I’ll be speaking at a meet-up in Warsaw and then twice at Devoxx.PL in Kraków. Hopefully…
