SAML (Security Assertion Markup Language)

An XML-based open standard for exchanging authentication and authorization data

Security Assertion Markup Language (SAML) is an open standard for exchanging authentication and authorization data between parties, particularly between an identity provider and a service provider.

Key concepts:

  • Identity Provider (IdP): Authenticates users
  • Service Provider (SP): Provides services to users
  • Assertions: XML documents containing security information
  • Single Sign-On (SSO): Primary use case

SAML is commonly used in enterprise environments for federated identity management and single sign-on solutions.