Cyber security firm Duo Labs uncover a serious flaw that affects the SAML single sign-on systems. The SAML flaw allows attackers to authenticate as another user without the person’s SSO password.
https://spinonews.com/2018/03/01/an-saml-flaw-allows-hackers-to-login-as-other-users/