Cross-Site Request Forgery
What is CSRF?
An attack that tricks a signed-in browser into sending an unintended request to a trusted site.
Done reading definitions?
Sign-in, SSO, MFA, roles, SCIM. The APIs are for you. The console is for everyone else.