SAML is insecure by design
Not only weird, SAML is also insecure by design, as it relies on signatures based on XML canonicalization, not XML byte stream. Which means you can exploit XML parser/encoder differences.
- from
- IAM
- added
- 2026-10-10
- likes
- 0
similar
-
SAML: A Fractal of Bad Design blog.trailofbits.com
“SAML is being crushed under the weight of its own complexity.” The author lists five flaws that compound: “1. Built on XML; 2. Canonicalization; 3. Enveloped signatures; 4. 'Kitchen-sink' design; 5. Ossification.” So instead of one more mitigation, identity providers get a…
-
SAML vs. OAuth web.archive.org
“OAuth is a protocol for authorization: it ensures Bob goes to the right parking lot. In contrast, SAML is a protocol for authentication, or allowing Bob to get past the guardhouse.”
-
The Difficulties of SAML Single Logout shibboleth.atlassian.net
On the technical and UX issues of single logout implementations.
-
-
Invoice Security Vulnerabilities invoice.secvuln.info
European Union introduced a "standard" in XML format, which comes with a set of security vulnerabilities.
-
PayloadsAllTheThings - SAML Injection github.com
IAM › SAML: “Not only weird, SAML is also insecure by design, as it relies on signatures based on XML canonicalization, not XML byte stream. Which means you can exploit XML parser/encoder differences.”