“On GitHub Enterprise Server instances that use SAML single sign-on (SSO) authentication with specific IdPs utilizing publicly exposed signed federation metadata XML, an attacker could forge a ...

Microsoft now recommends that Active Directory Federation Services customers migrate ... of SolarWinds through exploiting the Golden SAML flaw, according to the ProPublica report.