Application admins can register their app to accept responses from a federated authentication server. In an attempt to solve solutions to the problems mentioned above, authentication can be delegated to a “higher authority”. This can lead to a security issue if one of the systems becomes compromised – malicious users can then gain access to all systems that share the same password. It is likely that many users do not follow these recommended practices, and tend to reuse simple and easy to remember passwords across various systems.
Recommended practices for passwords dictate that every password must be unique, contain a long series of mixed alphanumeric characters, and that users should change their passwords regularly. In order to maintain membership consistency, every user needs to be associated with a password. Every application requires a list of user accounts that have been granted (or denied) access to the data.
0 kommentar(er)
