Detecting and mitigating forged authentication attacks within a domain

A method of detecting and mitigating forged authentication attacks within a domain, comprising the steps of:

• using a policy manager subsystem operating on a computing system comprising a memory and a processor to:
• receive and store a plurality of first authentication objects known to be generated by an identity provider associated with an authentication domain;
• calculate and store an authentication object identifier of each first authentication object;
• receive a request for access to a network resource associated with the authentication domain accompanies by a second authentication object;
• calculate an authentication object identifier of the second authentication object;
• compare the authentication object identifier of the second authentication object with the authentication object identifiers of the first authentication objects stored in the database of authentication object identifiers to determine whether the authentication object identifier of the second authentication object matches an authentication object identifier of any stored first authentication object;
• and
• where the authentication object identifier of the second authentication object does not match an authentication object identifier of any stored first authentication object, generate a notification that the identity provider may be compromised.