skills.rest
utsavthakur
utsavthakurCOMMUNITY
Explore all skills by this author →
GitHub

saml-sso-assertion-attacks

Validate SAML SSO assertions for signature and audience trust flaws.

Updated Jun 11, 2026
Search Tags:#SSO#enterprise security#security auditing#SAML#XML parsing
One-click install
npx skills add https://github.com/utsavthakur/agenticskills --skill saml-sso-assertion-attacks-utsavthakur
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: saml-sso-assertion-attacks
Source: https://github.com/utsavthakur/agenticskills/tree/main/saml-sso-assertion-attacks
Command: npx skills add https://github.com/utsavthakur/agenticskills --skill saml-sso-assertion-attacks-utsavthakur

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps validate the trustworthiness of SAML SSO assertions and identifies security vulnerabilities such as signature validation, assertion wrapping, and audience restrictions.

Core Features & Use Cases

  • Assertion Trust Validation: Ensures that SAML assertions are signed correctly and contain valid information.
  • Security Flaw Detection: Identifies security issues like weak audience restrictions, ACS handling, and XML trust boundaries.
  • Use Case: Use this Skill when conducting security assessments on enterprise SSO implementations using SAML-based SSO.

Quick Start

Run the saml-sso-assertion-attacks skill to validate the trust of SAML assertions from the provided XML endpoint.

Frequently Asked Questions about saml-sso-assertion-attacks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate SAML SSO assertion trust and detect enterprise security flaws?▼

You can validate SAML SSO assertion trust by checking signature validation, audience restrictions, and ACS handling to identify security flaws in enterprise SSO implementations.

What security vulnerabilities affect SAML SSO assertion signatures?▼

SAML SSO assertions are vulnerable to signature wrapping attacks, weak audience restrictions, and improper ACS handling, which allow attackers to manipulate XML trust boundaries.

How do I audit SAML XML trust boundaries for enterprise SSO?▼

Auditing SAML XML trust boundaries requires verifying XML parsing behavior to prevent assertion wrapping attacks, ensuring signature validation covers the exact assertion being processed.

Can I use automated scripts to check SAML SSO audience restrictions?▼

Yes, you can use scripts to check SAML SSO audience restrictions by validating that the audience restriction matches the service provider, preventing unauthorized enterprise access.

Does weak ACS handling affect SAML SSO security auditing?▼

Weak ACS handling affects SAML SSO security auditing because improper Assertion Consumer Service URL validation allows response injection, compromising enterprise SSO authentication flows.

Related Skills

Explore More Software Engineering Skills→
Obsidian-OwlObsidian-Owl
1

test-skill

Validate YAML frontmatter parsing and workflow scaffolding with a self-contained test skill.

Official
Basic
chatbotkitchatbotkit
13

hunt-saml

Test SAML endpoints for XSW, NameID manipulation, signature stripping, and XXE vulnerabilities.

Official
Advanced
YlikenYliken
5

saml-sso-assertion-attacks

Analyze SAML SSO assertions for signature validation and trust boundary weaknesses.

Community
Advanced
SkobynSkobyn

hunt-saml

Detect SAML/SSO endpoints and vulnerabilities like XML Signature Wrapping.

Community
Advanced