SAML: A fractal of bad design - The Trail of Bits Blog
kept by solarisrift
SAML's XML complexity, canonicalization issues, enveloped signatures, and design ossification cause persistent vulnerabilities; organizations should migrate to OpenID Connect.