What is SAML?

--> SAML stands for Security Assertion Markup Language.

--> SAML is XML based framework used for exchanging user authentication and attribute information.

--> The main purpose of SAML is to enable single sign-on for the web applications across various domains.

--> The main reason behind the development of SAML is the limitation of browser cookies.

--> Most single sign-on products use browser cookies to maintain authentication state so that reauthentication is not required.

--> Browser cookies are not transferred between different DNS domains.

--> So, if there is a cookie for facebook.com then that cookie will not be sent in any HTTP messages to Gmail.com.

--> To solve the authentication between cross domain single sign-on ( CDSSO) we use SAML.

--> SAML provides a framework to exchange authentication and authorization parameters between different DNS domains.

Md.Kareemoddin ( CCIE # 54759)

0 Comments