SAML vs. SSO

Comments (3)

scrapheap · 7h ago

The way I've tackled this type of issue in the past is to use Kerberos. You get you client machines set up to get their Ticket Granting Ticket on user login and then that can be used to connect to most relational databases. You then set up your IdP to support SPNEGO and then your users don't even interacts with the IdP in their web browser.

debarshri · 24m ago

it is privileged access management that you are describing. One of the key requirements for compliance frameworks is also to record the user sessions. Authentication is one aspect of it, i think key problem is authorization too.

sophiabannet1 · 5h ago

Excellent breakdown, this clearly illustrates why SSO is only half the story and PAM is essential for securing real privileged access.

Tell HN: Help restore the tax deduction for software dev in the US (Section 174)

GCP Outage (status.cloud.google.com)

Honda conducts successful launch and landing of experimental reusable rocket (global.honda)

Andrej Karpathy: Software in the era of AI [video] (youtube.com)

Frequent reauth doesn't make you more secure (tailscale.com)

A receipt printer cured my procrastination (laurieherault.com)

The Grug Brained Developer (2022) (grugbrain.dev)

The last six months in LLMs, illustrated by pelicans on bicycles (simonwillison.net)

Magistral — the first reasoning model by Mistral AI (mistral.ai)

If the moon were only 1 pixel: A tediously accurate solar system model (2014) (joshworth.com)

Apple announces Foundation Models and Containerization frameworks, etc (apple.com)

Working on databases from prison (turso.tech)

Jemalloc Postmortem (jasone.github.io)

Show HN: Workout.cool – Open-source fitness coaching platform (github.com)

Research suggests Big Bang may have taken place inside a black hole (port.ac.uk)

Containerization is a Swift package for running Linux containers on macOS (github.com)

Apple introduces a universal design across platforms (apple.com)

US-backed Israeli company's spyware used to target European journalists (apnews.com)

Marines being mobilized in response to LA protests (cnn.com)

WhatsApp introduces ads in its app (nytimes.com)

I convinced HP's board to buy Palm and watched them kill it (philmckinney.substack.com)

Chatterbox TTS (github.com)

Show HN: Unregistry – “docker push” directly to servers without a registry (github.com)

Resurrecting a dead torrent tracker and finding 3M peers (kianbradley.com)

Congratulations on creating the one billionth repository on GitHub (github.com)

Bruteforcing the phone number of any Google user (brutecat.com)

How I program with agents (crawshaw.io)

"Localhost tracking" explained. It could cost Meta €32B (zeropartydata.es)

Launch HN: Vassar Robotics (YC X25) – $219 robot arm that learns new skills

Start your own Internet Resiliency Club (bowshock.nl)

Kagi Reaches 50k Users (kagi.com)

Why SSL was renamed to TLS in late 90s (2014) (tim.dierks.org)

Building Effective AI Agents (anthropic.com)

OpenAI dropped the price of o3 by 80% (twitter.com)

Waymo rides cost more than Uber or Lyft and people are paying anyway (techcrunch.com)

Air India flight to London crashes in Ahmedabad with more than 240 onboard (theguardian.com)

Self-Host and Tech Independence: The Joy of Building Your Own (ssp.sh)

The Zed Debugger Is Here (zed.dev)

I have reimplemented Stable Diffusion 3.5 from scratch in pure PyTorch (github.com)

New US visa rules will force foreign students to unlock social media profiles (theguardian.com)

Meta invests $14.3B in Scale AI to kick-start superintelligence lab (nytimes.com)

We’re secretly winning the war on cancer (vox.com)

Joining Apple Computer (2018) (folklore.org)

Building supercomputers for autocrats probably isn't good for democracy (helentoner.substack.com)

Danish Ministry Replaces Windows and Microsoft Office with Linux and LibreOffice (heise.de)

Scrappy – Make little apps for you and your friends (pontus.granstrom.me)

My iPhone 8 Refuses to Die: Now It's a Solar-Powered Vision OCR Server (terminalbytes.com)

Convert photos to Atkinson dithering (gazs.github.io)

Fossify – A suite of open-source, ad-free apps (github.com)

Rendering Crispy Text on the GPU (osor.io)

SAML vs. SSO

Comments (3)