OWASPASVS 5.0 requirement
ASVS-V6.8.3 Saml assertions are uniquely processed and used only once within the validity period to prevent replay attacks.
- Standard
- OWASP ASVS 5.0
- Chapter
- V6 Authentication
- Section
- V6.8 Authentication with an Identity Provider
- Level
- L2 (requirement applies from this verification level up)
Requirement
Verify that SAML assertions are uniquely processed and used only once within the validity period to prevent replay attacks.