SAML

SAML: XML-based standard for exchanging authentication and authorization information. Secure implementation depends, in particular, on suitable algorithms, correct key management, verified implementationsImplementationThe practical realization of a security design, requirement, or control in a system or process., and a controlled chain of trust.

How it works and where it fits

SAML separates the subject, digital identity, authentication factor, and authorization decision. Authentication establishes who or what is presenting an identity; authorization then determines which action is permitted in the current context. Session state, device trust, request origin, and risk signals can further influence that decision.

Practical security relevance

Effective implementation requires a controlled identity lifecycle from creation through role and entitlement changes to suspension and removal. Strong authentication, least privilege, periodic recertification, and traceable logs are central. Controls must also identify abuse of legitimate accounts, because valid credentials alone do not prove that an action is legitimate.

Related concepts

• Security Assertion Markup LanguageSecurity Assertion Markup LanguageStandard for federated identities and the exchange of signed security assertions.: Standard for federated identities and the exchange of signed security assertions.
• Single Sign-OnSingle Sign-OnEnables access to multiple applications following a single central login.: Enables access to multiple applications following a single central login.
• Identity ProviderIdentity ProviderA service that authenticates identities and transmits identity information to applications.: A service that authenticates identities and transmits identity information to applications.
• OpenID ConnectOpenID ConnectProtocol for federated login and the transmission of verified identity information.: Protocol for federated login and the transmission of verified identity information.