thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Advanced

SAML Assertion

Signed XML statement from an IdP containing authentication, attribute, and authorization information about a subject.

Definition

Assertions include the subject's NameID, authentication time and method, attributes such as email and group membership, conditions such as audience and validity window, and the IdP's signature. Service providers must validate the signature, audience, and timestamps. Assertions can also be encrypted.

Example

A SAML assertion includes an attribute 'groups=Finance' that the SP maps to a Finance role.

Exam tip

Unsigned or improperly validated assertions allow impersonation; always verify the signature.

Related terms