It started with a routine exploration of the samlsso endpoint on a [redacted] platform. At first, it seemed like a typical authentication…