SAML: A Fractal of Bad Design

SAML, an XML-based authentication protocol created in 2002 by merging four different security protocols, became the foundation for single sign-on (SSO) systems in corporate and academic environments. However, the protocol suffers from fundamental design flaws rooted in its complex XML architecture and committee-driven development, making it increasingly unreliable—particularly due to problematic XML signature validation. The author argues SAML should be deprecated in favor of modern alternatives like OpenID Connect (OIDC).