Modern Authentication for the Security Admin
Microsoft identity expert Mark Morowczynski demystifies modern authentication protocols (SAML, OAuth, OIDC, JWTs) for non-identity security administrators.
Summary
The Shift from Legacy to Modern Authentication
Modern enterprise security relies on token-based authentication protocols (OAuth 2.0, OpenID Connect, SAML 2.0) to authenticate users and authorize API access across cloud services.
Deconstructing Authentication Flows and Claims
Mark Morowczynski breaks down token exchange flows, explaining how identity providers issue claims, bearer tokens, and JSON Web Tokens (JWTs).
Analyzing Attack Vectors in Modern Identity
Morowczynski explores common identity attacks—including token theft, illicit OAuth app consent grants, and conditional access bypasses.
Defensive Architecture and Identity Hardening
The author provides security administrators with actionable best practices to enforce continuous access evaluation, restrict third-party app consent, and monitor authentication logs.
Related talks
BSides Knoxville·34 min
Prabesh Thapa
Prabesh Thapa - Decoding OAuth & OIDC: The Path to Secure Authentication.
Black Hat Europe 2025·30 min
Zak Fedotkin
Industry experts analyze emerging threats surrounding The Fragile Lock: Novel Bypasses For SAML Authentication.
Briefings·30 min
Vaisha Bernard
Security researchers expose authorization flaws in Microsoft Entra OAuth implementations, gaining lateral access across internal enterprise services.