I have an issue with single sign on functionality while running BDD automated security tests.
Any suggestions on this issue is highly appreciated
I customized the continuum BDD security automated testing framework for my web app. To run the security test, I start the fiddler and OWASP ZAP tool.In OWASP ZAP, I configured fiddler port in the outgoing proxy section. My app uses an enterprise SSO for authentication. when I run the test, the script first does a SSO sign in.After SSO sign in and before the home page is completely displayed, the SSO session terminates causing all the scripts to fail.
My wild guess is ZAP or fiddler is tampering with the request/responses going back and forth. not sure
Any help on how to troubleshoot this issue is highly appreciated.
Regards
Srinivas