IT Security Assessment of OAuth and OIDC-based Single Sign-On Solutions such as Keycloak and Custom Implementations
In several projects, we assessed single sign-on solutions based on OAuth and OIDC. These systems aggregate access to many applications and therefore present attractive attack targets.
The testing uncovered common implementation flaws, such as issues with token handling, redirects, or cryptographic signature validation. Focused assessments helped identify risks and strengthen the security of central authentication.
Talk now
to our
Pentest experts.
Contact us

OSCP, M.Sc. Security Management
Talk now to our Pentest experts.

OSCP, M.Sc. Security Management
Penetration Testing
Since 2013 we conduct professional penetration test, based on international industry standards and years of experience in penetration testing, red teaming and hacking.
As a company for professional penetration testing, we do some things differently than other pentest provider: As a penetration test firm, we do not sell vulnerability scans as pentest. We do also focus on business security risks. You are looking for a professionally conducted penetration tests? Get the binsec team for your Pentest. Read more about our pentest service.
Contact us