Formal analysis of SAML 2.0 web browser single sign-on: breaking the SAML-based single sign-on for google apps
the avispa tool for the automated validation of internet security protocols and applications .