Updated and reblogged an old article titled "The dangers of SAML IdP-Initiated SSO".