SAML - A fractal of bad design - The Trail of Bits Blog https://blog.trailofbits.com/2026/09/21/saml-a-fractal-of-bad-design/ SAML OpenID Connect