---
id: 5851
title: "Meet Silver SAML: Golden SAML in the Cloud"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/meet-silver-saml/"
published_at: "2024-02-29T11:00:00Z"
tags: ["cloud", "vulnerability-research", "entra-id", "authentication", "saml", "golden-saml", "silver-saml", "certificate-abuse"]
phying_url: "https://phying.com/item/5851"
lang: en
---

# Meet Silver SAML: Golden SAML in the Cloud

## Summary

Semperis researchers detail Silver SAML: a stolen Entra ID SAML signing certificate lets attackers forge authentication responses to apps like Salesforce—no AD FS needed. Risks and defenses covered.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2024-02-29T11:00:00Z
- **Original:** https://www.semperis.com/blog/meet-silver-saml/
- **Phying News:** https://phying.com/item/5851