Contents
How is SAML response sent?
A SAML Response is sent by the Identity Provider to the Service Provider and if the user succeeded in the authentication process, it contains the Assertion with the NameID / attributes of the user.
How does SAML communicate?
SAML works by passing information about users, logins, and attributes between the identity provider and service providers. Each user logs in once to Single Sign On with the identify provider, and then the identify provider can pass SAML attributes to the service provider when the user attempts to access those services.
What is SAML 2.0 used for?
SAML 2.0 is an XML-based protocol that uses security tokens containing assertions to pass information about a principal (usually an end user) between a SAML authority, named an Identity Provider, and a SAML consumer, named a Service Provider.
Who is the identity provider for SAML SP?
The SAML IdP (Identity Provider) is a SAML entity that is deployed on the customer network. The IdP receives requests from the SAML SP and redirects users to a logon page, where they must enter their credentials.
How does the validation of a SAML Assertion work?
Once the SP has received the SAML assertion, it validates the signature using the public key in order to ensure the SAML assertion really came from its trusted IdP and that none of the values in the assertion have been modified. The SP can then extract the identity of the user from the SAML assertion along with any other attributes it needs.
How is single sign on initiated in an IDP?
The user selects a menu option or link on the IdP to request access to an SP web site, sp.example.com. This causes the IdP’s Single Sign-On Service to be called. The Single Sign-On Service builds a SAML assertion representing the user’s logon security context.
How does an IDP access a SP web site?
The user selects a menu option or link on the IdP to request access to an SP web site, sp.example.com. This causes the IdP’s Single Sign-On Service to be called.