Provably Sound Browser-Based Enforcement of Web Session Integrity
Formal analysis of SAML 2.0 web browser single sign-on: breaking the SAML-based single sign-on for google apps