SAML Identity Assertion Trust Bypass Signed, Not Verified
A Test-Drive SSO feature accepts a signed SAML assertion for any identity and JIT-provisions a session for it instantly — no invitation, no verification, no click, and no prior relationship between attacker and target required.
