What is SAML and How does it works?

Gupta Bless
6 min readNov 13, 2021
Photo by Joan Gamell on Unsplash

What is SAML/Security Assertions Markup Language Authentication?

SAML helps to provide a secure communication between two parties using the Extensible markup language/XML. These parties can be a user and server or a third party website. User who wants to be authenticated and server who authenticates the user. Nevertheless, here the user and server are known as “Identity Provider” and “Service Provider”.

Identity Provider: Suppose that the user wants to access a couple resources so to access the resources he has to prove his identity so he needs an identity provider to prove his identity. Identity providers will have the identities and ability to authenticate the users . Authentication can be done by a user’s username/password combination or user’s username/OTP combination, any combination implemented by an organization to prove his identity to access the service

Service Provider: It is the entity providing the service, typically in the form of an application for example SAML can be used on different websites to prove the identity.

Different service providers are available such as “Gmail, AWS, and Salesforce”. They work as Software as a…

--

--

Gupta Bless
Gupta Bless

Written by Gupta Bless

Security enthusiast working to secure web for others.

No responses yet