Yes, but how should ServiceNow create session tokens if it is not part of the SS... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

p0seidon on May 31, 2024 | parent | context | favorite | on: Hacker confirms access through infostealer infecti...

Yes, but how should ServiceNow create session tokens if it is not part of the SSO system? I don't know enough about ServiceNow, but I think every large company has some products that are not part of their-SSO system. So that makes sense, but I am not sure about the next step.

pluto_modadic on June 1, 2024 [–]

I think they mean regenerating servicenow's own tokens/cookies, without hitting okta. so SN's session would still be valid.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact