Other authentication methods used with HTTP
This chapter focuses on SAML, but it’s important to note that multiple authentication methods can be used with HTTP. The following are the various ways:
- HTTP authentication methods:
- Basic [16]: This is the simplest authentication method. In this case, the authentication header sends the username and password encoded in
base64. - Digest [17]: This method is somewhat similar to basic authentication. However, the difference lies in how the username and password are sent; instead of being encoded, they are sent as a hash.
- Basic [16]: This is the simplest authentication method. In this case, the authentication header sends the username and password encoded in
- HTTPS authentication method:
- Certificate [18]: This method leverages the features of SSL/TLS. It is unique because not only the server is authenticated but also the client via a particular certificate.
- Application and other protocols for authentication:
- Form/cookie/token-based: This is a conventional method where the web application receives the credentials, processes them, and sets a token inside a cookie to...
