https://hackershare.dev/en/bookmarks/720260
SAML Is Insecure by Design