A new policy requires the security team to perform web application and OS vulnerability scans. All of the company's web applications use federated authenticatio...