{"id":166,"date":"2019-09-17T13:02:06","date_gmt":"2019-09-17T13:02:06","guid":{"rendered":"https:\/\/www.samarthya.me\/wps\/?p=166"},"modified":"2019-09-17T13:02:06","modified_gmt":"2019-09-17T13:02:06","slug":"security-assertion-markup-language","status":"publish","type":"post","link":"https:\/\/blog.samarthya.me\/wps\/2019\/09\/17\/security-assertion-markup-language\/","title":{"rendered":"Security Assertion Markup Language"},"content":{"rendered":"<h1>What is SAML?<\/h1>\n<p>Security Assertion Markup Language (SAML) is an open standard that allows identity providers (IdP) to pass authorization credentials to service providers (SP). It implements a secure method of passing <span style=\"text-decoration: underline;\"><em>user authentications and authorizations<\/em><\/span> (users, logins, and attributes) between the identity provider and service providers.<\/p>\n<blockquote><p>SAML enables internet SSO and provides centralized user management.<\/p><\/blockquote>\n<p><img fetchpriority=\"high\" decoding=\"async\" class=\"aligncenter size-medium wp-image-167\" src=\"https:\/\/www.samarthya.me\/wps\/wp-content\/uploads\/2019\/09\/SAML-1-300x273.png\" alt=\"SAML\" width=\"300\" height=\"273\" srcset=\"https:\/\/blog.samarthya.me\/wps\/wp-content\/uploads\/2019\/09\/SAML-1-300x273.png 300w, https:\/\/blog.samarthya.me\/wps\/wp-content\/uploads\/2019\/09\/SAML-1.png 326w\" sizes=\"(max-width: 300px) 100vw, 300px\" \/><\/p>\n<h2>Main components<\/h2>\n<ol>\n<li>Identity Provider (IdP): It provides with access information to the service requesting, by challenging the user requesting for the access, to the Service Provider.<\/li>\n<li>Service provider: It provides the user the authorization to access the service after getting the required authentication from IdP.<\/li>\n<li>SAML Assertion: It is a formatted document that IdP send to the SP that contains the user authorization information.<\/li>\n<li>Each identity provider and service provider need to agree upon the exact configuration for the SAML authentication to work.<\/li>\n<\/ol>\n<p><img decoding=\"async\" class=\"aligncenter  wp-image-168\" src=\"https:\/\/www.samarthya.me\/wps\/wp-content\/uploads\/2019\/09\/Federated-Authentication-Authorization-300x107.png\" alt=\"Flow\" width=\"894\" height=\"319\" srcset=\"https:\/\/blog.samarthya.me\/wps\/wp-content\/uploads\/2019\/09\/Federated-Authentication-Authorization-300x107.png 300w, https:\/\/blog.samarthya.me\/wps\/wp-content\/uploads\/2019\/09\/Federated-Authentication-Authorization-768x274.png 768w, https:\/\/blog.samarthya.me\/wps\/wp-content\/uploads\/2019\/09\/Federated-Authentication-Authorization-1024x366.png 1024w, https:\/\/blog.samarthya.me\/wps\/wp-content\/uploads\/2019\/09\/Federated-Authentication-Authorization.png 1143w\" sizes=\"(max-width: 894px) 100vw, 894px\" \/><\/p>\n","protected":false},"excerpt":{"rendered":"<p>What is SAML? Security Assertion Markup Language (SAML) is an open standard that allows identity providers (IdP) to pass authorization credentials to service providers (SP). It implements a secure method of passing user authentications and authorizations (users, logins, and attributes) between the identity provider and service providers. SAML enables internet SSO and provides centralized user [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_exactmetrics_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":""},"categories":[3],"tags":[],"class_list":["post-166","post","type-post","status-publish","format-standard","hentry","category-personal"],"_links":{"self":[{"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/posts\/166","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/comments?post=166"}],"version-history":[{"count":0,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/posts\/166\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/media?parent=166"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/categories?post=166"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.samarthya.me\/wps\/wp-json\/wp\/v2\/tags?post=166"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}