SAML: A Fractal of Bad Design

Trail of Bits released a critical analysis of the Security Assertion Markup Language (SAML) standard, arguing that its architecture is riddled with design flaws that undermine its intended security guarantees. In the blog post, the authors dissect the protocol’s reliance on XML signatures, the lack of robust cryptographic binding, and the proliferation of optional features that create a “fractal” of complexity. They highlight how these weaknesses enable a range of attacks—from signature wrapping to certificate substitution—making SAML a frequent target for sophisticated adversaries. The post also offers concrete mitigation recommendations, such as enforcing strict signature validation, disabling legacy algorithms, and adopting more modern identity‑exchange protocols.

The article sparked a lively discussion on Hacker News, where it received 60 up‑votes and 13 comments. Readers praised the depth of the technical review and the actionable guidance, while some questioned whether the proposed mitigations are practical for large enterprises already invested in SAML. Overall, the piece has been cited by security practitioners and researchers as a key reference for understanding the persistent vulnerabilities in SAML deployments and the need for a systematic overhaul of identity‑exchange standards.