Hey I could use some advice:

If I have a CMS, and its login page uses SSO with another 3rd party for authentication, I shouldn't need to lock that login page down by IP address should I? Isn't the security of it contingent on the 3rd party providing the SSO not me?

0

If you have a fediverse account, you can quote this note from your own instance. Search https://mastodon.bsd.cafe/users/pertho/statuses/114336786630660254 on your instance and quote it. (Note that quoting is not supported in Mastodon.)