DevOps

Cut admin overhead: Azure SAML-based SSO for SonarQube saves time and risk

Introduction This article will help you through setting up SAML-based SSO between SonarQube and Azure Entra ID. You may simplify access control for your SonarQube instance, increase security, and expedite user authentication by turning on SSO. Additionally, it guarantees centralised identity control and lowers the overhead associated with maintaining local SonarQube accounts. This integration will […]

Deepak
Deepak
Read

Adobe

AEM SAML Integration – Step by Step Guide

In the dynamic landscape of digital experience management, security and user convenience are paramount. Adobe Experience Manager (AEM) stands out as a leading solution, empowering organizations to create, manage, and deliver engaging digital experiences. However, with the increasing importance of security, integrating robust authentication mechanisms like Security Assertion Markup Language (SAML) with Single Sign-On (SSO) […]

Software developmentTechnology

How to Integrate Django with Social Auth Login – Facebook and GitHub

Social authentication is a powerful feature that allows users to log in to your Django web application using their social media accounts like Facebook, Google, Twitter, and more. It simplifies users’ registration and login process while providing additional user data for your application. Basic Setup: Step 1: Installation – First, install the django-social-auth library using […]

DrupalTechnologyUser Experience

What is Single Sign-On (SSO) and how does it work?

Single sign-on (SSO) is an authentication method that enables users to securely authenticate with multiple applications and websites using just one set of credentials. SSO is an authentication scheme that allows a user to log in with a single ID to any of several related, yet independent software systems. True single sign-on allows users to […]

AWSDevOps

Access and Modify Google Sheet using Python

  This would be my first blog where I am using Python. I am excited to share what I did using Python. I wanted to update google sheet using bash shell scripting but did not found anything I can play around using bash. Later, I opted for Python as it provides “gspread” library which could […]

Application SecurityTechnology

(In)Secure Authentication schemes in REST APIs

To make authenticated REST API calls in applications, several authentication schemes are used by developers. Some of them use HTTP Basic Authentication scheme, and others, as per their needs(or wants), use custom authentication schemes. Now, it’s good to experiment but not at the cost of security. In this blog, we will look into the common […]

Nikhit Kumar
Nikhit Kumar
Read

Automation TestingTesting

Easy approach to handle authentication window in selenium webdriver

Before we get started, on how to handle authentication window in Selenium WebDriver. Let’s discuss what authentication window is & why it is used in applications? What is Authentication Window? Authentication is a process which is required to access some applications in which HTTP authentication is used for security purpose. These are server side validations […]

Shilpa Ranjan
Shilpa Ranjan
Read

Application SecurityTechnology

How I discovered RCE through a Misconfigured plugin

We have seen a lot of applications where some sub-domains or sub-directories are publicly exposed (intently or by mistake). So, with experience from our past pentests we have made a habit of testing  for vulnerable or accessible sub-domains. During one of such testing, I was manually testing the URLs of different sub-domains of the application and […]

Ankit Giri
Ankit Giri
Read

Technology

Cross-domain SSO with Google into AWS Console using SAML

Recently, I worked on a task wherein the users had to be authenticated based on existing Google credentials to get access of AWS Management Console. It took more time than expected to make it work as the documentation provided by Google is not complete. Let’s start by setting this up step by step. Scenario: Provide […]

Navjot Singh
Navjot Singh
Read