Unverified50% confidenceFactExact time
SCIM's `active` attribute is the key switch for deprovisioning on departure; setting it to false triggers account disabling on the application side.
1
Sources
50%
Confidence
Long-term
Relevance
10/20/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIf an authentication solution only receives SCIM events but does not connect them to the application's internal permission model, sessions and permissions on the application side may remain valid after a user is disabled on the IdP side, which is a vulnerability commonly flagged in security audits.67% similarUnverifiedPrompt injection or abnormal user input may allow an Agent to access data that should have been blocked or perform operations that should not have been executed, which is an architectural-layer vulnerability where permission checks are bypassed.60% similarUnverified本地代理工具如Clash采用SSL终止代理模式，在系统信任库安装自签名根证书并动态签发伪造叶子证书，本质是受控的中间人（MITM）架构58% similarUnverifiedIntroducing a confirmation mechanism to pause and request user confirmation before executing high-risk operations is a common solution to the security boundary problem of AI operating on logged-in accounts.57% similarUnverified2FA mainly protects interactive login flows and provides limited protection for long-lived tokens that have already been stolen and can be used directly for API calls.56% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1077505API
curl https://kongchang.com/api/v1/knowledge/claims/1077505MCP
get_claim(id=1077505)