Re:SAML Is Insecure by Design
by tremon on Friday August 06, 2021 @07:31AM
(#28085704)
But why would the client need to know about the specific claims and conditions in the IDP assertion? Isn't it the SP that's supposed to verify the claims, not the client?
(note that I don't know anything about SAML except how to configure certain applications for it).
(note that I don't know anything about SAML except how to configure certain applications for it).