Reading up on SAML
1 deep · digging since sep 21
- SAML: A fractal of bad design - The Trail of Bits Blog
SAML's XML complexity, canonicalization issues, enveloped signatures, and design ossification cause persistent vulnerabilities; organizations should migrate to OpenID Connect.