From the course: CISSP Cert Prep (2021): 5 Identity and Access Management

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

SAML

SAML

- [Instructor] Modern authentication often takes place over the web and the security assertion markup language, SAML allows browser-based single sign on across a variety of systems. There are three actors in a SAML request. First, there is the end user who wants to use a web based service. In SAML language the end user is known as the principal. Second, there is the organization providing proof of identity. Usually the end users employer, school or other account provider. This organization is known as the identity provider. Finally, there is the web based service that the end user wishes to access. This organization is known as the service provider. Here's how web based single sign on works using SAML. First, the end user principal requests access to a resource from the service provider. The service provider checks to see if the user has a logged in session and if so, just skips ahead and…

Contents