Under certain conditions a valid SAML IdP response may be used to impersonate another Secret Server user.Referenceshttps://delinea.com/security-advisories