https://leberconsultingllc.com/2018/02/27/saml-vulnerability-lets-attackers-log-in-as-other-users/