Modern authentication often takes place over the web, and the Security Assertion Markup Language (SAML) allows browser-based single sign-on across a variety of systems. In this video, learn about the function of the SAML.
- [Instructor] Modern authentication often…takes place over the web, and the Security…Assertion Markup Language, SAML,…allows browser based single sign-on…across a variety of web systems.…There are three actors in a SAML request.…First there is the end user who…wants to use web based services.…In SAML terms, the end user is known as the principal.…Second there's the organization…providing the proof of identity.…Usually the end user's employer,…school, or other account provider.…
This organization is known as the identity provider.…Finally there is the web based service…that the end user wishes to access.…This organization is known as the service provider.…Here's how web based single sign-on works using SAML.…First the end user, principal, requests access…to a resource from the service provider.…The service provider checks to see…if the user already has a logged in session,…and if so, just skips ahead and grants access.…
Let's follow the case where the user…is not already logged in, however.…In this case the service provider…
You can sign up for Mike's free study group at certmike.com, and find his study guides at the Sybex test prep site. To review the complete CISSP Body of Knowledge, visit https://www.isc2.org/cissp-domains/default.aspx.
Note: This course is part of a series releasing throughout 2018. A complete learning path will be available once all the courses are released.
- Identity and access management overview
- Identification mechanisms: user names, access cards, biometrics, and registration
- Authentication factors
- Password authentication protocols
- Identity as a service (IDaaS)
- Enforcing accountability
- Managing credentials with policies
- Using access control lists
- Defending against access control attacks
Skill Level Advanced
1. Identity and Access Management
5. Credential Management
7. Access Control Attacks
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.