What's the use of saml or ws-federation if you can't protect it? | Hacker News Reader