Authentication

SAML: A fractal of bad design

Trail of Bits explains why SAML—the XML-based SSO protocol—is structurally fragile: XML complexity, canonicalization pitfalls, enveloped signatures, and a long history of authentication bypasses.

Essay · Security · Authentication · Engineering