0
Pending Review

Proper SSO on all platforms

Keith Woodcock 3 years ago 0

Currently between the 3 CW apps (Manage, Control, Automate) I believe only CW Manage does this properly across the board. And by properly I mean it uses the native browser when doing SSO. Automate is the worst as both on mobile and on PC it wants to login using its own proprietary browser which means we have to leave it vulnerable because we cant implement simple logic based rules requiring a machine to be verified by us (Azure joined/registered). Control works on PC because its primarily accessed via browser but on mobile its similar to Automate where it uses the old method of "webview" I believe its called so it cant verify its coming from a compliant device. An update like this would probably do more for securing things than any of the recent hardening guidelines that were sent out