Allowing a proxy address from a federated user could allow a malicious user to spoof an authorized user's credentials and ...