“SAML uses signatures based on computed values.”
SAML signs XML after it has been parsed and normalized. Parse it and write it back, and the document can come out meaning something different. Finland’s tax authority and health record systems were open to exactly that. The bug is the spec. Patching implementations one at a time just waits for the next round trip.