Eric Woodruff

Eric Woodruff, Chief Identity Architect at Semperis, dives into the critical nOAuth authentication flaw affecting SaaS applications. He reveals how this vulnerability allows attackers to impersonate users with just an email address, leading to potential data breaches. The discussion highlights the urgent need for SaaS vendors to adopt more secure OpenID Connect practices. Woodruff also shares insights on the challenges of securing Active Directory and the complexities surrounding responsible disclosure in the tech industry.