From the course: CompTIA Security+ (SY0-601) Cert Prep: 4 Identity and Access Management Design and Implementation

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

SAML

SAML

- [Instructor] Modern authentication often takes place over the web and the Security Assertion Markup Language, SAML, allows browser-based single sign-on across a variety of systems. There are three actors in a SAML request. First, there is the end user who wants to use a web-based service. In SAML language the end user is known as the principal. Second, there is the organization providing proof of identity. Usually the end user's employer, school, or other account provider. This organization is known as the identity provider. Finally, there is the web-based service that the end user wishes to access. This organization is known as the service provider. Here's how web-based single sign-on works using SAML. First, the end user principal requests access to a resource from the service provider. The service provider checks to see if the user has a logged-in session, and if so, just skips ahead and grants access. Let's follow…

Contents