I know saml_idp does not use ruby-saml as a runtime dependency, but are there any concerns that saml_idp could be affected by the similar issue?
https://github.blog/security/sign-in-as-anyone-bypassing-saml-sso-authentication-with-parser-differentials/