Contents
What are SAML claims?
These SAML tokens contain pieces of information about the user known as claims. A claim is information that an identity provider states about a user inside the token they issue for that user. In SAML token, this data is typically contained in the SAML Attribute Statement.
Are SAML claims case sensitive?
SAML is an authentication protocol that authenticates your session with an Identity Provider (IdP) rather than directly with the system. By using SAML, you can create a single login ID for multiple systems. Login IDs are case-sensitive so the NameID claim and the login ID must use the same case.
How does SAML authentication work in a service provider?
The Service Provider agrees to trust the Identity Provider to authenticate users. In return, the Identity provider generates an authentication assertion, which indicates that a user has been authenticated. SAML is a standard single sign-on (SSO) format.
How is a request issued in a SAML session?
A request can be issued by any session participant to request that the session is to be ended. As specified in the SAML Conformance specification , the SAML logout messages can be exchanged over either the synchronous SOAP over HTTP binding or using the asynchronous HTTP Redirect, HTTP POST, or HTTP Artifact bindings.
How to customize SAML claims for enterprise applications?
For example, if the email address is both the username and the unique identifier, set the value to user.mail. To learn more about customizing SAML claims, see How to: customize claims issued in the SAML token for enterprise applications.
Where does the certificate go in a SAML Response?
Certificate – The SP needs to obtain the public certificate from the IdP to validate the signature. The certificate is stored on the SP side and used whenever a SAML response arrives. ACS Endpoint – Assertion Consumer Service URL – often referred to simply as the SP sign-in URL.