The road to hell is paved with SAML Assertions

This is one hell of a security vulnerability! How did this not get more attention?