Managing users and permissions - Port Swigger
Summary: PortSwigger's documentation for Burp Suite DAST states that the product manages user permissions through role-based access control, with users added either locally or through single sign-on. It says authentication is supported via the LDAP and SAML SSO standards, that users can also be created and removed via SCIM, and that a backup local admin user is recommended even when SSO handles authentication.
What you should know: The documentation warns that users may be able to access and exploit internal systems if infrastructure isn't sufficiently secured, and that limiting new user creation and assigning permissions carefully is crucial to mitigating that risk.
Read the original at PortSwigger Research ↗
- Topics
- Identity & Access Management
- Related
- FBI flash alert says Artex tool automating cyberattacks at ‘machine speed’ Cyber Risks · Nov 13, 2026Connect Wise Cloud Backup application abused in cross-tenant token sweep Cyber Risks · Oct 19, 2026Sponsored: Specter Ops on the impact of AI agents on Blood Hound Cyber Risks · Sep 20, 2026