Federated Single Sign-On (SSO) and Multi-Factor Authentication (MFA) infrastructures have become foundational components of contemporary identity and access management architectures. Their security, however, depends not only on the strength of individual authentication mechanisms but also on the interactions among identity providers, service providers, authentication protocols, tokens, sessions, recovery mechanisms, and trust relationships. This paper presents a systematic STRIDE-based security evaluation methodology for identifying and analyzing adversarial threats against SSO and MFA infrastructure. The methodology models authentication and federation workflows as security-sensitive information flows and maps potential threats to the STRIDE categories of spoofing, tampering, repudiation, information disclosure, denial of service, and elevation of privilege. Particular attention is given to trust-boundary crossings, authentication assertions, session state, credential recovery, token processing, and administrative interfaces. The supplied literature is primarily concerned with statistical modeling, forecasting, uncertainty estimation, and model evaluation rather than identity-security engineering; consequently, it provides methodological support for systematic analysis and uncertainty-aware evaluation rather than direct empirical evidence concerning SSO or MFA attacks. The study therefore positions STRIDE as a structured analytical framework and proposes risk-oriented evaluation criteria for comparing threat exposure across federated authentication components. The resulting framework emphasizes attack-surface decomposition, threat identification, severity assessment, control analysis, and residual-risk evaluation. The analysis demonstrates that authentication strength alone does not eliminate systemic risks created by federation trust, token handling, recovery paths, and privileged administrative functions.

Federated Identity, Single Sign-On, Multi-Factor Authentication, STRIDE

Abbasimehr H, Paki R, Bahrini A (2022). A novel approach based on combining deep learning models with statistical methods for COVID-19 time series forecasting. Neural Computing & Applications, 34: 3135–3149.

Brockwell P, Davis R (1991). Time Series Theory Methods, 2nd ed. Springer, New York.

Cerqueira V, Torgo L, Mozetič I (2020). Evaluating time series forecasting models: An empirical study on performance estimation methods. Machine Learning, 109: 1997–2028.

Chatfield C (1993). Calculating interval forecasts. Journal of Business & Economic Statistics, 11(2): 121–135.

Cryer DJ, Chan K (2008). Time Series Analysis: With Applications in R, 2nd ed. Springer, New York.

Fan J, Gijbels I (1996). Local Polynomial Modelling and Its Applications. Taylor & Francis.

Ganapathy, S. K. (2024). Threat Modeling for Federated SSO and MFA Systems: STRIDE-Based Analysis of Attack Vectors. International Journal of Data Science and Machine Learning, 4(02), 55-73. https://www.academicpublishers.org/journals/index.php/ijdsml/article/view/stride-analysis-sso-mfa

Gooijer J, Hyndman R (2006). 25 years of time series forecasting. International Journal of Forecasting, 22: 443–473.

Inoue A, Jin L, Rossi B (2017). Rolling window selection for out-of-sample forecasting with time-varying parameters. Journal of Econometrics, 196: 55–67.

Kong J, Gu L, Yang L (2018). Prediction interval for autoregressive time series via oracally efficient estimation of multi-step-ahead innovation distribution function. Journal of Time Series Analysis, 395: 690–708.

Pan L, Politis DN (2016). Bootstrap prediction intervals for linear, nonlinear and nonparametric autoregressions. Journal of Statistical Planning and Inference, 177: 1–27.

Petropoulos F, Makridakis S, Stylianou N (2022). COVID-19: Forecasting confirmed cases and deaths with a simple time series model. International Journal of Forecasting, 38: 439–452.

Pierce DA (1971). Least squares estimation in the regression model with autoregressive-moving average errors. Biometrika, 58: 299–312.

R Core Team (2024). R: A Language and Environment for Statistical Computing. R Foundation for Statistical Computing, Vienna, Austria.

Shao Q, Polavarapu M, Small L, Singh S, Nguyen Q, Shao K (2024). A longitudinal mixed effects model for assessing mortality trends during vaccine rollout. Healthcare Analytics, 6: 100347.

Shao Q, Yang L (2017). Oracally efficient estimation and consistent model selection for auto-regressive moving average time series with trend. Journal of the Royal Statistical Society, Series B, Statistical Methodology, 79: 507–524.

Shumway RH, Stoffer DS (2010). Time Series Analysis and Its Applications: With R Examples, 3rd ed. Springer Texts in Statistics, 2010.

Wang J, Liu R, Cheng F, Yang L (2014). Oracally efficient estimation of autoregressive error distribution with simultaneous confidence band. The Annals of Statistics, 42: 654–668.

Zhong C (2024). Statistical inference for innovation distribution in ARMA and multi-step-ahead prediction via empirical process. Journal of Nonparametric Statistics, 1–27.