Tag: SAML

SAML 2.0 for enterprise single sign-on: assertions, protocols, bindings, metadata, IdP discovery and the Web Browser SSO Profile.

• SAML Web Browser SSO Profile: SP and IdP-Initiated Flows

  10 Jun, 2018

  • 16 min read

  SAML 2.0 Web Browser SSO Profile explained: SP-initiated vs IdP-initiated SSO, Redirect and POST bindings, AuthnRequest and Response anatomy, and RelayState.

• SAML IdP Discovery: How Service Providers Find the Right IdP

  13 May, 2018

  • 16 min read

  How a SAML service provider finds a user's identity provider: common domain cookie, identifier-first login, discovery services, and the OASIS discovery profiles.

• SAML Metadata Explained: EntityID, SP and IdP Descriptors

  1 Apr, 2018

  • 10 min read

  Why SAML 2.0 needs metadata: entityID, EntityDescriptor, IdP and SP role descriptors, signing keys, and static vs dynamic metadata exchange between partners.

• SAML Basics: Assertions, Protocols, Bindings and Profiles

  27 Mar, 2018

  • 12 min read

  The building blocks of SAML 2.0: assertions, protocols, the five bindings (Redirect, POST, Artifact, SOAP, PAOS) and profiles, explained for developers.

• Do You Really Need SAML? What SAML SSO Solves

  24 Mar, 2018

  • 7 min read

  What problem SAML single sign-on actually solves, how it works at a high level, and when SAML still makes sense next to OpenID Connect for enterprise SSO.