SAML single sign-on security

The security of SAML-based single sign-on, where authentication assertions passed between an identity provider and a service provider can be forged, replayed or verified incorrectly. Failures typically grant account access without a password.