What is SAML?
Security Assertion Markup Language (SAML) stands as a widely embraced open standard based on XML, specifically crafted for the secure exchange of authentication and authorization (AA) information among federated organizations. It serves to streamline Single Sign-On (SSO) capabilities for browser-based access.
Established in 2005 as an OASIS standard and consistently upheld by the Organization for the Advancement of Structured Information Standards (OASIS), SAML 2.0 amalgamates elements from SAML 1.1, the Liberty Alliance Identity Federation Framework (ID-FF) 1.2, and Shibboleth 1.3.
Within the SAML 2.0 specification, three crucial entities assume distinct roles: the principal, the service provider, and the identity provider.
As an illustration, consider Sally accessing her investment account on ucanbeamillionaire.com. To log her in and let her access her account, the site employs SAML for authentication.
SAML 2.0 is widely adopted and used in various scenarios...