Is your SAML metadata secure?

Grade a SAML SP/IdP entity's published metadata — certificate expiry and strength, signing algorithms, HTTPS endpoints, and assertion-signing posture — against SAML 2.0 and the XML Signature Wrapping CVE class. Every finding cited, results shareable by permalink.