Reviews the code that accepts a SAML response before you trust its identity: signature coverage, XML signature wrapping, audience, recipient, InResponseTo, time window, assertion replay and the attributes you map to accounts. Names each path where a forged or replayed assertion signs in as another user, and gives the smallest check that closes it.