Issue with SSO while running BDD security test automation scripts

28 views
Skip to first unread message

Srinivas Aditya

unread,
Jul 12, 2017, 11:38:03 AM7/12/17
to BDD-Security
Hi

I have an issue with single sign on functionality while running BDD automated security tests.
Any suggestions on this issue is highly appreciated

I customized the continuum BDD security automated testing framework for my web app. To run the security test, I start the fiddler and OWASP ZAP tool.In OWASP ZAP, I configured fiddler port in the outgoing proxy section. My app uses an enterprise SSO for authentication. when I run the test, the script first does a SSO sign in.After SSO sign in and before the home page is completely displayed, the SSO session terminates causing all the scripts to fail.

My wild guess is ZAP or fiddler is tampering with the request/responses going back and forth. not sure

Any help on how to troubleshoot this issue is highly appreciated.

Regards
Srinivas

Reply all
Reply to author
Forward
0 new messages