https://microsegment.io/tags/adfs/ Recent content in Adfs on microsegment.io Hugo en-us Tue, 14 Jul 2026 00:00:00 +0000 https://microsegment.io/post/2026-07-14-identity-provider-containment-boundary/ Tue, 14 Jul 2026 00:00:00 +0000 https://microsegment.io/post/2026-07-14-identity-provider-containment-boundary/ <p>Identity is often described as the new perimeter. That framing misses the harder architectural question: what protects the system that creates the identity assertion?</p> <p><a href="https://cloud.google.com/blog/topics/threat-intelligence/recovering-active-adfs-signing-keys-machine-dpapi">New Mandiant research</a> makes the problem concrete. During a red team engagement, Mandiant recovered an active Active Directory Federation Services token-signing key from the host&rsquo;s machine-scoped cryptographic store. With that key, the team forged a SAML assertion for a Global Administrator identity that Microsoft Entra ID accepted.</p>