domains / families / security / saml-sso-assertion-attacks

saml-sso-assertion-attacks

separate

SAML SSO assertion attack playbook. Use when testing signature validation, assertion wrapping, audience restrictions, ACS handling, XML trust boundaries, and enterprise SSO flaws.

When to use

• testing signature validation
• assertion wrapping
• audience restrictions
• ACS handling
• XML trust boundaries
• enterprise SSO flaws
• IdP/SP confusion
• replay and freshness checks

When not to use

• OAuth or OIDC SSO alternatives
• auth boundary issues after SSO
• XML parser attack depth

Skill page

Source