Mastering Active Directory - Second Edition

Security Assertion Markup Language (SAML)

In the federated environment, the IdP and the SP need to exchange authentication and authorization data. SAML is an XML-based standard format that is used to present the data. This standard was first introduced in 2001 by OASIS Security Services Technical Committee and the latest version available is 2.0. This is a commonly used standard by many federation service providers and application developers to provide an SSO experience. The requesting and processing of claims are exactly the same as the example used in the previous section, with the only difference being the format of the token request and response. SAML uses signed XML files as the token. In SAML terminology, the security tokens generated ...