↓Skip to main content
Aura Research Division

Tim Goddard

Bypassing SAML 2.0 SSO with XML Signature Attacks
Tim Goddard
SSO Saml XSW
Unfortunately, many SAML consumers don’t validate responses properly, allowing attacks up to and including full authentication bypass.