SAML: Trusted Embedded Key
This exercise covers the exploitation of a service provider (SP) that doesn't check the certificate provided in the SAMLResponse
Course
Make sure you check out PentesterLab PRO and PentesterLab PRO Enterprise to develop your skills.