Forge SAML Token via AD FS Key

This procedure covers the AD FS signing-key path for forging SAML tokens: an adversary who obtains a trusted token-signing private key can create new assertions with chosen identities, claims, and validity periods and submit them to SAML relying parties. A highly privileged identity claim may provide administrative access; MFA can be bypassed where the relying party trusts MFA claims from the federated IdP. Assertion acceptance and resulting authorization still depend on the relying party's trust and claim-mapping configuration.