Using an mTLS Identity Provider to achieve Password-less auth...

Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation, and low Earth orbit Armen Tashjian Pinterest has required the use of managed and compliant devices in our SSO flow, so that only known and healthy devices acce...

Using an mTLS Identity Provider to achieve Password-less auth, Device Health Attestation, and low Earth orbit
Armen Tashjian

Pinterest has required the use of managed and compliant devices in our SSO flow, so that only known and healthy devices access our tools.

In this talk, we’ll share details about our custom identity provider, how we've implemented user facing mTLS, and a compliance framework to evaluate devices.

https://bsidessf2023.sched.com/event/1I0HA/using-an-mtls-identity-provider-to-achieve-password-less-auth-device-health-attestation-and-low-earth-orbit