@@ -232,7 +232,8 @@ with `rootDomains` set to one of 3 possible values:
232232
233233- all: UPN domain validation applied to all verified domains
234234- enumerated: validation applied only to the listed domains
235- - none: validation applied to no domains (the state prior to the Dec 2025 update)
235+ - none: validation applied to no domains (the state prior to the Dec 2025
236+ update)
236237
237238Currently this can only be done via the Graph API:
238239
@@ -485,12 +486,12 @@ versions are accepted.
485486## References
486487
487488- [ Deep-dive to Azure Active Directory Identity Federation - AADInternals]
488- - [ Security vulnerability in Azure AD & Office 365 identity federation - AADInternals]
489+ - [ Security vulnerability in Entra identity federation - AADInternals]
489490- [ Golden SAML - CyberArk]
490491- [ Golden SAML Revisited: The Solorigate Connection - CyberArk]
491492- [ Investigating identity threats in hybrid cloud environments - Microsoft]
492493- [ SAML 2.0 Bearer Assertion Profiles for OAuth 2.0 - RFC 7522]
493- - [ Microsoft identity platform and OAuth 2.0 SAML Bearer Assertion Flow - Microsoft Learn]
494+ - [ Azure OAuth 2.0 SAML Bearer Assertion Flow - Microsoft Learn]
494495- [ SAML 2.0 Core Specification - OASIS]
495496- [ WS-Federation 1.2 Specification - OASIS]
496497- [ XML Signature Syntax and Processing - W3C]
@@ -513,12 +514,12 @@ versions are accepted.
513514[ T1606.002 ] : https://attack.mitre.org/techniques/T1606/002/
514515
515516[ Deep-dive to Azure Active Directory Identity Federation - AADInternals ] : https://aadinternals.com/post/aad-deepdive/
516- [ Security vulnerability in Azure AD & Office 365 identity federation - AADInternals ] : https://aadinternals.com/post/federation-vulnerability/
517+ [ Security vulnerability in Entra identity federation - AADInternals ] : https://aadinternals.com/post/federation-vulnerability/
517518[ Golden SAML - CyberArk ] : https://www.cyberark.com/resources/threat-research-blog/golden-saml-newly-discovered-attack-technique-forges-authentication-to-cloud-apps
518519[ Golden SAML Revisited: The Solorigate Connection - CyberArk ] : https://www.cyberark.com/resources/threat-research-blog/golden-saml-revisited-the-solorigate-connection
519520[ Investigating identity threats in hybrid cloud environments - Microsoft ] : https://www.microsoft.com/en-us/security/blog/2024/05/15/investigating-identity-threats-in-hybrid-cloud-environments/
520521[ SAML 2.0 Bearer Assertion Profiles for OAuth 2.0 - RFC 7522 ] : https://datatracker.ietf.org/doc/html/rfc7522
521- [ Microsoft identity platform and OAuth 2.0 SAML Bearer Assertion Flow - Microsoft Learn] : https://learn.microsoft.com/en-us/entra/identity-platform/v2-saml-bearer-assertion
522+ [ Azure OAuth 2.0 SAML Bearer Assertion Flow - Microsoft Learn] : https://learn.microsoft.com/en-us/entra/identity-platform/v2-saml-bearer-assertion
522523[ SAML 2.0 Core Specification - OASIS ] : https://docs.oasis-open.org/security/saml/v2.0/saml-core-2.0-os.pdf
523524[ WS-Federation 1.2 Specification - OASIS ] : https://docs.oasis-open.org/wsfed/federation/v1.2/os/ws-federation-1.2-spec-os.html
524525[ XML Signature Syntax and Processing - W3C ] : https://www.w3.org/TR/xmldsig-core/
0 commit comments