The Google SAML Single Sign On service suffers from a vulnerability where the authentication response did not include the identifier of the authentication request nor the identity of the service provider.
afd4d0a0a4488e33b685bde8037994e45d14ff01299b9bada666d4c67d3216b4