Write up in the works but for now take a look here:
https://github.com/yogisec/VulnerableSAMLApparrow-up-right
Last updated 6 years ago