Identity Management Security — Publications

Academic publications on Identity Management (IdM), digital identity, and Single Sign-On (SSO) security, including OAuth 2.0, OpenID Connect (OIDC), and SAML 2.0, with research contributions in vulnerability analysis, automated conformance testing, DevSecOps integration, and artificial intelligence. This page collects peer-reviewed work on SSO, identity federation, protocol-level attacks, vulnerabilities, and security testing tools such as Micro-Id-Gym.


2025

Towards Continuous Risk Assessment and Conformance Checking of IdM Deployments
IEEE DevSecOpsRO, 2025

2024

CSRFing the SSO Waves: Security Testing of SSO-Based Account Linking Process
IEEE EuroS&P, 2024
Enhancing Security Testing for Identity Management Implementations: Introducing Micro-Id-Gym Language and Micro-Id-Gym Testing Tool
IEEE Security & Privacy, 2024

2021

Integrating a Pentesting Tool for IdM Protocols in a Continuous Delivery Pipeline
ETAA / LNCS 13136, 2021

2020

Micro-Id-Gym: a Flexible Tool for Pentesting Identity Management Protocols in the Wild and in the Laboratory
ETAA / LNCS 12515, 2020
Automated Assistance to the Security Assessment of API for Financial Services
now publishers, 2020
Verifiable Contracting: A Use Case for Onboarding and Contract Offering in Financial Services with eIDAS and Verifiable Credentials
ESORICS DETIPS, 2020

2019

Micro-Id-Gym: Identity Management Workouts with Container-Based Microservices
IJISC, 2019

About & Google Scholar profile

This page is maintained as an accessible index of research on Identity Management, digital identity, Single Sign-On (SSO) security, OAuth, OpenID Connect, SAML, identity federation, account linking attacks, vulnerability research, automated conformance testing, and artificial intelligence. It provides a consolidated reference for peer-reviewed work, including publications, tools, and research contributions such as Micro-Id-Gym.

Google Scholar profile: link