Saml authentication bypass vulnerability

Perhaps?