> Thousands of lines, neatly formatted. Buried inside: names, emails, tokens — pure PII leaking from identity federation events. Every request logged, every assertion stored. What should be metadata became a liability.
Identity federation systems, whether SAML, OIDC, or custom protocols, process sensitive profile data during authentication. In production, federated login flows