SAML (Security Assertion Markup Language) is an XML-based standard in which an identity provider sends digitally signed assertions to a service provider to confirm who a user is. It is widely used for enterprise single sign-on.
Why it matters
Many business applications support SAML, so a company can control access to all of them from one directory. The service provider trusts the assertion because it is signed with a key it already knows. Compared with newer OpenID Connect, SAML is older and heavier but remains very common in corporate and education environments.
Example
A user opens a SaaS app and is redirected to the company's identity provider. After login, the browser posts a signed SAML response back to the app, containing the user's email and group memberships, and the app creates a session.
Common mistakes
- Not validating signatures and audience restrictions on the response, which allows forged logins.
- Letting the signing certificate expire without a rotation plan.
- Mixing up SAML with OAuth. They solve related but different problems.
Related
Get notified when this term updates
Plus occasional practical tips on uptime and monitoring, nothing else. Unsubscribe anytime.
यह पेज सामान्य जानकारी है, जिसे हमारी संपादकीय टीम ने लिखा है और दस्तावेज़ीकरण बदलने पर अपडेट किया जाता है। सर्वर और प्रदाता अलग-अलग होते हैं, इसलिए बदलाव पहले सुरक्षित तरीके से जाँचें। देखें: संपादकीय नीति और अस्वीकरण.