SAML suppose to be secure!

using SAML standard does not mean that your SAML implementation is automatically secure. Here is attacks examples on XML signature (simple order change in XML might open a door)

http://youtu.be/RHIkb9yEV1k