SAML is the devil. If it weren't for its XML aspects we'd probably not have bothered as much with alternatives.
SAML is bad semantically too, not just because of XML. SAML is arguably the worst cryptographic standard ever created.
SAML is bad semantically too, not just because of XML. SAML is arguably the worst cryptographic standard ever created.