thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Security Assertion Markup Language (SAML)

XML-based standard for exchanging authentication and authorization data between an IdP and SP.

Definition

SAML 2.0 enables browser-based federated SSO using signed XML assertions delivered through HTTP Redirect or POST bindings. It is widely used for enterprise SaaS SSO. Its XML signature processing has a history of implementation flaws, and it is less suited to mobile and API use than OIDC.

Example

An employee clicks the Workday tile, and the IdP posts a signed SAML assertion to Workday's ACS URL.

Exam tip

SAML = XML assertions for web SSO; OIDC = JSON tokens built on OAuth 2.0.

Don't confuse it with

Related terms