saml-sso-assertion-attacks

Validate SAML SSO assertions for signature and audience trust flaws.

Updated Jun 11, 2026

Search Tags:#SSO #enterprise security #security auditing #SAML #XML parsing

Ready to run

npx skills add https://github.com/utsavthakur/agenticskills --skill saml-sso-assertion-attacks-utsavthakur

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: saml-sso-assertion-attacks
Source: https://github.com/utsavthakur/agenticskills/tree/main/saml-sso-assertion-attacks
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill saml-sso-assertion-attacks-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps validate the trustworthiness of SAML SSO assertions and identifies security vulnerabilities such as signature validation, assertion wrapping, and audience restrictions.

Core Features & Use Cases

Assertion Trust Validation: Ensures that SAML assertions are signed correctly and contain valid information.
Security Flaw Detection: Identifies security issues like weak audience restrictions, ACS handling, and XML trust boundaries.
Use Case: Use this Skill when conducting security assessments on enterprise SSO implementations using SAML-based SSO.

Quick Start

Run the saml-sso-assertion-attacks skill to validate the trust of SAML assertions from the provided XML endpoint.

Frequently Asked Questions about saml-sso-assertion-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I validate SAML SSO assertion trust and detect enterprise security flaws?▼

You can validate SAML SSO assertion trust by checking signature validation, audience restrictions, and ACS handling to identify security flaws in enterprise SSO implementations.

What security vulnerabilities affect SAML SSO assertion signatures?▼

SAML SSO assertions are vulnerable to signature wrapping attacks, weak audience restrictions, and improper ACS handling, which allow attackers to manipulate XML trust boundaries.

How do I audit SAML XML trust boundaries for enterprise SSO?▼

Auditing SAML XML trust boundaries requires verifying XML parsing behavior to prevent assertion wrapping attacks, ensuring signature validation covers the exact assertion being processed.

Can I use automated scripts to check SAML SSO audience restrictions?▼

Yes, you can use scripts to check SAML SSO audience restrictions by validating that the audience restriction matches the service provider, preventing unauthorized enterprise access.

Does weak ACS handling affect SAML SSO security auditing?▼

Weak ACS handling affects SAML SSO security auditing because improper Assertion Consumer Service URL validation allows response injection, compromising enterprise SSO authentication flows.