Skip to content

Comment on A large collection of fraudulent web storesparent

Comments

With third party cookies going away, URL parameters are the only way to do SSO across domains. Not much you can do about it.

With SAML IIRC the IdP request is GET (but hey that one is fairly public - no credentials have been supplied yet) and the response is POST back to the origin site.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.