logoalt Hacker News

tomjen3today at 7:59 PM1 replyview on HN

You use Entra. Entra can do jwt’s.

Saml is just not reasonable in our modern security environment.


Replies

ocdtrekkietoday at 8:01 PM

Entra is just allowing the Chinese government in your environment. Why bother with authentication at all?

https://www.war.gov/News/News-Stories/Article/Article/428899... (Microsoft has solely discontinued this practice for the DoD tier. Commercial, GCC, and GCC High are still impacted because foreign labor is cheaper than the risk to your security.)