🏢
SAML
Authentication
XML-based federation protocol where an IdP issues signed assertions to a service provider.
Definition
SAML (Security Assertion Markup Language) is commonly used for enterprise SSO. The identity provider sends a signed “assertion” to the service provider stating the user’s identity and attributes.
In plain English
XML-based federation protocol where an IdP issues signed assertions to a service provider.
Why this matters
Why it matters: Correct signature validation and strict configuration are critical; misconfigurations can allow impersonation or excessive attribute sharing.
Example
Example: An SP validates the signed assertion, checks audience/recipient, enforces short lifetimes, and maps attributes minimally.