With SAML the IP can judge the identity of the RP before releasing anything to it. So not just any hand that can reach into your wallet - just a hand approved by the card issuer... Read More...