Reading from http://en.wikipedia.org/wiki/SAML_2.0 , I'm trying to understand the mechanism that guarantees the authenticity of the SAMLResponse sent in step 5 of the process.
The way I understand it, SAML is designed so that the service provider can trust an identity provider for authentication without directly contacting it. However this relies on the user agent re-transmitting a response from the identity provider back to the service provider. It seems to me like a compromised agent could return a fake validated response. How would the service provider validate this without trying to contact the identity provider?
Thanks for your time.