Security Analyses for Single-Sign-On Systems
This forum is for people to jointly investigate potential security flaws of web-based single-sign-on mechanisms. The main page of the analysis service is http://www.sso-analysis.org. We expect you to have questions about how to do the analysis. Please feel free to involve us to your investigation. Our email addresses are ruiwanATmicrosoftDOTcom, shuochenATmicrosoftDOTcom and xw7ATindianaDOTedu.
Filtering and SortingUse these options to narrow down the question and discussion list.
- 371904

Websites using SSO services (Please contribute)
Rui Wang ISRC Friday, February 03, 2012 7:09 PM - 111579

BRM Analyzer bugs
cs0317 Tuesday, January 24, 2012 11:43 PM - 51096

Questions waiting for web geeks to answer
cs0317 Thursday, March 15, 2012 11:33 PM - 0647

Questions to share with everyone.
cs0317 Thursday, March 15, 2012 10:17 PM - 0222

Neede an expert analysis of vulnerability in this trace?
ScreenAnalyst Wednesday, November 28, 2012 10:43 AM - 0291

SCEP 2012 free for corporate usage ?
Vlado Petrov Friday, November 09, 2012 2:13 PM - 2497

Integrating Lync in SharePoint
kabilan Shanmugavel Thursday, August 09, 2012 9:47 AM - 0457

from domain to workgroup and back again
twb098 Thursday, October 04, 2012 5:01 PM - 0360

VESNA M ALBINO ~REAL LIFE~ NIS, SERBIA
VESNA M ALBINO Saturday, September 01, 2012 11:46 AM - 0484

OpenID Connect SSO
Standfast Sunday, July 29, 2012 6:07 PM - 0686

It won't let me delete possible malicious software from my computer.
ElectronicsYes Sunday, July 01, 2012 6:49 AM - 0531

Blocking Wifi Screen Captures
Dryson Sunday, July 01, 2012 2:02 AM - 1791

Roll your own SSO solutions
SystemsPlanet Monday, May 14, 2012 7:01 PM - 1652

Investigation: ACSSimpleForm-GoogleID
cs0317 Monday, April 23, 2012 6:52 PM - 5660

Blanket Protected Web Application using Google ID
Rui Wang ISRC Wednesday, April 11, 2012 5:18 PM - 8771

Investigation: ADFS-Benefits (sts -> ehr)
cs0317 Wednesday, April 04, 2012 9:20 PM - 11999

Investigation: ADFS-Benefits (ehr -> enwisen)
cs0317 Wednesday, March 28, 2012 6:35 PM - 0740

Investigation: sears.com using Facebook ID
Rui Wang ISRC Friday, March 30, 2012 1:17 AM - 3910

testing tools for sso vulnerabilities
dlumma Friday, March 23, 2012 10:03 PM - 0706

investigation: google ID login on zoho.com
Rui Wang ISRC Thursday, February 09, 2012 6:28 PM - 1986

investigation: Facebook ID login on hrblock.com
Rui Wang ISRC Thursday, February 09, 2012 12:11 AM - 1720

investigation: Facebook ID login on livingsocial.com
Rui Wang ISRC Wednesday, February 08, 2012 1:43 AM - 1894

Investigation: Live ID on bing.com
Rui Wang ISRC Tuesday, February 07, 2012 7:43 PM - 0878

Investigation: Facebook ID login on freelancer.com
Rui Wang ISRC Tuesday, February 07, 2012 7:25 PM