If this warrants a name, then I'm claiming the Unobtainium SAML Attack now--target the keys used to sign the federation metadata. Use those keys to insert new t

If this warrants a name, then I'm claiming the Unobtainium SAML Attack now--target the keys used to sign the federation metadata. Use those keys to insert new trusted identity/service providers, and use those to issue whatever assertions you want.