SAML lets your customers sign in with their own identity provider, which removes a password from your system and adds a trust relationship you have to validate correctly. When validation is wrong, an attacker…