★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★★Open research. Global perspectives.
editor@theamericanjournals.comPublisher Home ↗
Engineering and Technology OPEN ACCESS

Threat Analysis and Risk Assessment of Federated Authentication Architectures: Securing SSO and MFA Workflows

Kwame Mensah
Department of Data Science and Computational Intelligence, African Institute of Digital Analytics, Accra, Ghana
ama Owusu
Department of Machine Learning and Data Engineering, African Institute of Digital Analytics, Kumasi, Ghana
DOI Crossref DOI 10.37547/tajet/Volume08Issue09-02
tajet 2026
VOL. 8 / NO. 09 SEPTEMBER
FULL TEXT PP. 8-14
DOWNLOAD PDF

View all articles in this issue ↗

VOLUME 8
ISSUE 09
YEAR 2026
PAGES 8-14
RESEARCH OVERVIEW

Abstract

Federated authentication architectures have become a central mechanism for providing scalable access to distributed applications through Single Sign-On (SSO) and Multi-Factor Authentication (MFA). Their security advantage derives from centralized or delegated identity assurance, but federation also creates complex trust relationships among identity providers, service providers, authentication brokers, clients, and authorization components. Consequently, compromise of one critical component can propagate across multiple relying applications. This research presents a structured threat analysis and risk assessment approach for federated authentication architectures, focusing on SSO and MFA workflows. The methodology combines architectural decomposition, STRIDE-oriented threat identification, workflow-level attack analysis, trust-boundary assessment, likelihood-impact scoring, and control-oriented risk prioritization. Particular attention is given to credential theft, token manipulation, replay, session hijacking, identity-provider compromise, MFA bypass, assertion misuse, privilege escalation, repudiation, and availability attacks. The analytical model emphasizes that MFA does not independently eliminate federation risk because authentication assurance can be undermined at protocol, session, recovery, or trust-management layers. The study also incorporates methodological insights from the supplied literature concerning systematic evaluation, robustness, ensemble reasoning, reproducibility, and decomposition of complex systems. The resulting framework provides a practical basis for identifying high-risk authentication paths and strengthening identity federation through layered controls, continuous monitoring, least privilege, resilient session management, and risk-adaptive MFA.

RESEARCH TOPICS

Keywords

Federated Authentication Single Sign-On Multi-Factor Authentication STRIDE

Downloads

Download data is not yet available.
SOURCES & SCHOLARSHIP

References

  1. Altboum Z, Steuerman Y, David E, Barnett-Itzhaki Z, Valadarsky L, Keren-Shaul H, et al. (2014). Digital cell quantification identifies global immune cell dynamics during influenza infection. Molecular Systems Biology, 10: 720. https://doi.org/10.1002/msb.134947
  2. Avila Cobos F, Alquicira-Hernandez J, Powell JE, Mestdagh P, De Preter K (2020). Benchmarking of cell type deconvolution pipelines for transcriptomics data. Nature Communications, 11: 1–14. https://doi.org/10.1038/s41467-019-13993-7
  3. Cai M, Yue M, Chen T, Liu J, Forno E, Lu X, et al. (2022). Robust and accurate estimation of cellular fraction from tissue omics data via ensemble deconvolution. Bioinformatics, 38: 3004–3010. https://doi.org/10.1093/bioinformatics/btac279
  4. Cai M, Zhou J, McKennan C, Wang J (2024). scmd facilitates cell type deconvolution using single-cell dna methylation references. Communications Biology, 7: 1. https://doi.org/10.1038/s42003-023-05690-5
  5. Chang W, Wan C, Lu X, Tu S-w, Sun Y, Zhang X, et al. (2019). Ictd: A semi-supervised cell type identification and deconvolution method for multi-omics data. bioRxiv preprint: https://doi.org/10.1101/426593.
  6. Chen W, Wang T, Pino-Yanes M, Forno E, Liang L, Yan Q, et al. (2017). An epigenome-wide association study of total serum ige in hispanic children. Journal of Allergy and Clinical Immunology, 140: 571–577. https://doi.org/10.1016/j.jaci.2016.11.030
  7. Chu T, Wang Z, Pe’er D, Danko CG (2022). Cell type and gene expression deconvolution with bayesprism enables bayesian integrative analysis across bulk and single-cell rna sequencing in oncology. Nature Cancer, 3: 505–517. https://doi.org/10.1038/s43018-022-00356-3
  8. Gasparoni G, Bultmann S, Lutsik P, Kraus TF, Sordon S, Vlcek J, et al. (2018). Dna methylation analysis on purified neurons and glia dissects age and alzheimer’s disease-specific changes in the human cortex. Epigenetics & Chromatin, 11: 1–19. https://doi.org/10.1186/s13072-017-0171-z
  9. Guintivano J, Aryee MJ, Kaminsky ZA (2013). A cell epigenotype specific model for the correction of brain cellular heterogeneity bias and its application to age, brain region and major depression. Epigenetics, 8: 290–302. https://doi.org/10.4161/epi.23924
  10. Jaffe AE, Irizarry RA (2014). Accounting for cellular heterogeneity is critical in epigenome-wide association studies. Genome Biology, 15: R31. https://doi.org/10.1186/gb-2014-15-2-r31
  11. Jeong Y, de Andrade e Sousa LB, Thalmeier D, Toth R, Ganslmeier M, Breuer K, et al. (2022). Systematic evaluation of cell-type deconvolution pipelines for sequencing-based bulk dna methylomes. Briefings in Bioinformatics, 23: bbac248. https://doi.org/10.1093/bib/bbac248
  12. Jiang Y, Gruzieva O, Wang T, Forno E, Boutaoui N, Sun T, et al. (2019). Transcriptomics of atopy and atopic asthma in white blood cells from children and adolescents. European Respiratory Journal, 53: 1900102.
  13. Lawrence I, Lin K (1989). A concordance correlation coefficient to evaluate reproducibility. Biometrics, 45: 255–268.
  14. Luo C, Liu H, Xie F, Armand EJ, Siletti K, Bakken TE, et al. (2022). Single nucleus multi-omics identifies human cortical cell regulatory genome diversity. Cell genomics, 2: 100107. https://doi.org/10.1016/j.xgen.2022.100107
  15. Newman AM, Liu CL, Green MR, Gentles AJ, Feng W, Xu Y, et al. (2015). Robust enumeration of cell subsets from tissue expression profiles. Nature Methods, 12: 453–457. https://doi.org/10.1038/nmeth.3337
  16. Patrick E, Taga M, Ergun A, Ng B, Casazza W, Cimpean M, et al. (2020). Deconvolving the contributions of cell-type heterogeneity on cortical gene expression. PLOS Computational Biology, 16: e1008120. https://doi.org/10.1371/journal.pcbi.1008120
  17. Psioda MA (2016). Statistical methods for Bayesian clinical trial design and DNA methylation deconvolution, PhD thesis, The University of North Carolina at Chapel Hill.
  18. Racle J, de Jonge K, Baumgaertner P, Speiser DE, Gfeller D (2017). Simultaneous enumeration of cancer and immune cell types from bulk tumor gene expression data. eLife, 6: e26476. https://doi.org/10.7554/eLife.26476
  19. Salas LA, Zhang Z, Koestler DC, Butler RA, Hansen HM, Molinaro AM, et al. (2022). Enhanced cell deconvolution of peripheral blood using dna methylation for high-resolution immune profiling. Nature Communications, 13: 761.
  20. Swapna LS, Huang M, Li Y (2023). Gtm-decon: Guided-topic modeling of single-cell transcriptomes enables sub-cell-type and disease-subtype deconvolution of bulk transcriptomes. Genome Biology, 24: 190. https://doi.org/10.1186/s13059-023-03034-4
  21. Teschendorff AE, Zhu T, Breeze CE, Beck S (2020). Episcore: Cell type deconvolution of bulk tissue DNA methylomes from single-cell RNA-seq data. Genome Biology, 21: 1–33. https://doi.org/10.1186/s13059-019-1906-x
  22. Zhang Z, Wiencke JK, Kelsey KT, Koestler DC, Molinaro AM, Pike SC, et al. (2023). Hierarchical deconvolution for extensive cell type resolution in the human brain using dna methylation. Frontiers in Neuroscience, 17: 1198243. https://doi.org/10.3389/fnins.2023.1198243
  23. Zheng X, Zhang N, Wu H-J, Wu H (2017). Estimating and accounting for tumor purity in the analysis of dna methylation data from cancer studies. Genome Biology, 18: 17.
  24. Zhu L, Lei J, Devlin B, Roeder K (2018). A unified statistical framework for single cell and bulk rna sequencing data. Annals of Applied Statistics, 12: 609.
  25. Ganapathy, S. K. (2024). Threat Modeling for Federated SSO and MFA Systems: STRIDE-Based Analysis of Attack Vectors. International Journal of Data Science and Machine Learning, 4(02), 55-73. https://www.academicpublishers.org/journals/index.php/ijdsml/article/view/stride-analysis-sso-mfa
CONTINUE EXPLORING

Most read articles by the same author(s)

Explore other published research by the authors of this article.