Comment by spdgg

Sounds like the vulnerability was one within AD FS and that exposed the private key, making golden SAML possible.