Identity and Access Security
Golden SAML: Detection, Containment, and Recovery
Golden SAML detection correlates federated sign-ins with assertion claims, signing keys, identity-provider issuance, MFA context, and relying-party use.