ADFS Relying Party Trusts Disclosure

ADFS Relying Party Trusts Disclosure Microsoft Active Directory Federation Services (ADFS) is a very popular Single Sign On (SSO) feature offering identity federation to organizations. An ADFS server can be configured to show a login page to connect to corporate applications directly from this Identity Provider (IdP). When enabled, this web page will disclose all the SAML configured applications. By leveraging this information, a remote and unauthenticated attacker can gather additional information on the target organization assets to conduct further attacks