3.0 Securing Identity Server

Section 3.1, Disabling Unused Authentication Protocols

Section 3.2, Securing Authentication by Using Strong and Multi-Factor Authentication Methods

Section 3.3, Configuring SSL Communication between Browsers and Identity Server

Section 3.4, Configuring SSL Communication with Identity Server and a Service Provider

Section 3.5, Securing Federation

Section 3.6, Configuring a Whitelist of Target URL

Section 3.7, Blocking Access to Identity Server Pages

Section 3.8, Preventing the Error Page to Display the Tomcat Version

Section 3.9, Enabling Advanced Session Assurance

Section 3.10, Securing Identity Server Web Service Interface

Section 3.11, Default Security Settings in Configuration Files