Proving a WS-Federation passive requestor profile with a browser modelThomas GroßBirgit Pfitzmannet al.2005CCS 2005