SAML: A Fractal of Bad Design

What happened

SAML, the XML-based authentication protocol that birthed the SSO industry, is fundamentally flawed due to XML complexity, canonicalization issues, enveloped signatures, and design ossification, making it vulnerable to signature wrapping attacks and parser differentials that persist despite decades of awareness. Organizations should migrate to OpenID Connect (OIDC), which avoids these pitfalls through simpler JSON-ba…

Summary assembled by rule from the sources below

Timeline

1. 18:57
   First appeared on Hacker NewsHHacker News
2. 10:58
   Discussion started on LobstersLLobsters

Sources