Golden SAML — Golden SAML abuses compromised signing authority to create forged identity assertions. Services that trust the signing material accept the attacker’s claims. The attack exploits the identity infrastructure’s trust relationship rather than each service’s password system. – Federated Identity Attacks

Added October 7, 2026

Golden SAML — Golden SAML abuses compromised signing material to create fraudulent identity assertions. A relying service accepts the assertions when validation trusts the compromised issuer. The attack undermines federated access without requiring each victim’s password. – Identity Infrastructure Attacks

Added October 7, 2026