SAML Test how comments are treated by XML parsers Test if the signature is actually checked and what happens if you remove it