Avoid reusing an valid SAML assertion sent from IDP

Problem/Motivation

The Authentication Request and Assertion are sent via browser redirects so they pass through the user’s browser. This makes them easy to steal via techniques such as cross site scripting or malicious plugins.

Proposed resolution

OneTimeUse on the SAML Response will prevent an valid request and assertion from being reused.