IDP Sync Attack: Secure Your Groups & Use IDs! #shorts

For your IDP sync attack, um audit your groups, reserve any groups that are existing that belong to the admins, things of that nature. Uh if possible, configure your SSO to use the group ID instead of the group name. It really, really should That's the core like SAML is designed like you should be using the ID, but they don't. There are applications out there internally developed and externally developed where they base it on the name. So, you kind of have to go through that manually and fix those.