Source
SSO, directory sync & provisioning — found from sitemap — Passbolt
Checked for Passbolt on 13 Oct 2026
- Page
- https://www.passbolt.com/incidents/scim-cure53-security-audit-results
- Checked
- 13 Oct 2026, 13:54 UTC
- How we may use it
- Public page, crawling permitted
Technical details
- type
- page
- http status
- 200
- content hash
- sha256:0f380105680fdb21be90268c9060a7668f69017a9d84fa040d365f9634f269eb
- permission
- robots_ok
- screenshot
- Screenshot on file (internal exhibit, not published)
Cited by
Facts read from this source
-
Cure53 SCIM audit 2026 Report an error
“In February 2026, Cure53 conducted a two-week white-box penetration test and source-code audit of Passbolt's SCIM, Azure AD integration, and directory synchronisation components.”
-
Cure53 audit scope Report an error
“Three senior researchers covered five work packages across fifteen evaluation days.”
-
SCIM opt in default Report an error
“These features are also disabled by default and will remain opt-in.”
-
Audit before stable policy Report an error
“This is part of our release process: new integration surfaces are audited before being declared stable.”
-
Fix versions Report an error
“v5.10: PBL-15-001, 002, 004, 005, 010 v5.11: PBL-15-003, 008, 009, 011, 012 V5.13: PBL-15-006 Won't-fix: PBL-15-007”
-
Selfhosted SCIM upgrade advice Report an error
“Cloud customers are already on v5.12+; Self-hosted operators should upgrade if they are using SCIM.”
-
Copyright entity Report an error
“Copyright © 2026 Passbolt SA. All rights reserved.”
-
Hosting options Report an error
“Passbolt is versatile and can be self-hosted or cloud-hosted.”
-
Made in europe Report an error
“Made in Europe. Privacy by default.”
-
Audit components Report an error
“white-box penetration test and source-code audit of Passbolt's SCIM, Azure AD integration, and directory synchronisation components”
4 facts read from this page are not shown because they could not be confirmed on the page as captured.
Scores citing this record
- The CISO Encryption model & independent audits
- The CISO SSO, directory sync & provisioning
- The Compliance Auditor Encryption model & independent audits
- The Compliance Auditor SSO, directory sync & provisioning
- The DevOps Engineer Encryption model & independent audits
- The DevOps Engineer SSO, directory sync & provisioning
- The Identity Engineer Encryption model & independent audits
- The Identity Engineer SSO, directory sync & provisioning
- The Skeptic Encryption model & independent audits
- The Skeptic SSO, directory sync & provisioning
- The SME Owner Encryption model & independent audits
- The SME Owner SSO, directory sync & provisioning