View source for Assertion injection attack

{{LanguageHeader|en}}
{{CyberTerm|definition=In the context of a federated protocol, consists of an attacker attempting to force an RP to accept or process an assertion or assertion reference in order to gain access to the RP or deny a legitimate subscriber access to the RP. The attacker does this by taking an assertion or assertion reference and injecting it into a vulnerable RP.|source=NIST SP 800-63-4}}