What is Security Assertion Markup Language (SAML)?

Abstract

The Infinite Talent SSO solution supports the SAML 2.0 specification.

SAML is an XML-based open standard for exchanging authentication and authorization data between security domains, that is, between an identity provider (a producer of assertions) and a service provider (a consumer of assertions). SAML is a product of the OASIS Security Services Technical Committee.

The single most important business requirement that SAML is trying to solve is the Web Browser Single Sign-On problem. As its name suggests, SAML allows business entities to make assertions regarding the identity, attributes, and entitlements of a subject (an entity that is often a human user) to other entities, such as a partner company or another enterprise application.

The SAML standard defines a framework for exchanging security information between online business partners. More precisely, SAML defines a common XML framework for exchanging security assertions between entities especially for SSO purposes.