Security/Guidelines/SAML: Difference between revisions

link fix
(image fix)
(link fix)
Line 92: Line 92:
=== SAML in a nutshell ===
=== SAML in a nutshell ===


See also [Security/Guidelines/OpenID_Connect] to understand the OIDC flows, which are similar to SAML.
See also [[Security/Guidelines/OpenID_Connect]] to understand the OIDC flows, which are similar to SAML.


SAML (Security Assertion Markup Language) is a protocol that allow web applications (also called service providers, relying parties, or SP, RP) to authenticate users with an external server called the Identity Provider (IdP). The IdP hosts a database of user credentials and attribute information.
SAML (Security Assertion Markup Language) is a protocol that allow web applications (also called service providers, relying parties, or SP, RP) to authenticate users with an external server called the Identity Provider (IdP). The IdP hosts a database of user credentials and attribute information.
Confirmed users
502

edits