On Breaking SAML: Be Whoever You Want to Be. - Juraj Somorovsky; Andreas Mayer; Jörg Schwenk; Marco Kampmann; Meiko Jensen (USENIX Security Symposium, 2012)