Glossary

SAML

Security Assertion Markup Language

A federation protocol using signed assertions; the service provider must validate the exact signed assertion it consumes and its destination, audience, subject and time conditions.

Defined in: OASIS SAML 2.0 core specification

Covered in

Guide

SAML single sign-on: verify signed assertions without losing the identity boundary

Bind a validated SAML assertion to its trusted issuer, the exact signed element, your service, the browser request and a replay record before creating a local session, and keep your SAML library ahead of its advisories.

Practice: Local project: Prove deprovisioning reaches sessions and queued work