I maintain a popular Saml library for NET (aspnetsaml). And yep, I made that rookie mistake too