Alessandro Armando, Roberto Carbone, Luca Compagna, Jorge Cuéllar, M. Llanos Tobarra. Formal analysis of SAML 2.0 web browser single sign-on: breaking the SAML-based single sign-on for google apps. In Vitaly Shmatikov, editor, Proceedings of the 6th ACM Workshop on Formal Methods in Security Engineering, FMSE 2008, Alexandria, VA, USA, October 27, 2008. pages 1-10, ACM, 2008. [doi]
Abstract is missing.