Security Advanced SECURITY-393 · 17 min

A break-glass access role bypasses MFA (Auth and Session Failure)

The role assumption works and the application session policy still interrupts recovery. The service still works through the primary path, but one dependency only fails when the old component is finally drained away.

IAMPro

시나리오

The role assumption works and the application session policy still interrupts recovery. The service still …

구독하면 이어서 볼 수 있어요

이 문제의 전체 시나리오와 점검 체크리스트, 복구 순서, 모범 풀이는 Pro 구독에서 열립니다.

구독 안내 보기

다음으로 이어서 보기 좋은 문제

내 풀이

저장됨

1 · 원인 분석 2 · 복구 방안 3 · 재발 방지

풀이 기록·힌트·북마크는 로그인하면 계정에 저장되어 웹·앱에서 이어집니다.

A break-glass access role bypasses MFA (Auth and Session Failure)

An emergency account bypasses the first control while a downstream session rule still revokes it too early during a failover rehearsal

A break-glass or emergency path bypasses one identity control while another session or device rule still revokes it before the task finishes during a failover rehearsal

A federated login trust points at the correct issuer while the downstream application still enforces the old audience or group claim mapping during a staged decommission

Conditional access blocks the break-glass admin path during a device compliance incident