HUMAN VERIFICATION REQUIRED ASVS 6.8.3 SAML replay prevention (when federated_identity is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

SAML assertions are uniquely processed and used only once within the validity period to prevent replay attacks.