(Security Assertion Markup Language) An XML-based format from OASIS for exchanging security information for single sign-on. The "assertions" are statements from a SAML authority that authenticate a user, confirm some attribute about the individual and grant or deny authorization. SAML provides only the message format and must be used with protocols that perform the authentication service. See XACML and single sign-on.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2009 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- .NET SAML Component for C#,VB,ASP.NET 2.0 (Windows)
- The Security Assertion Markup Language SAML v1.1 library for .NET adds support for SAML v1.1 single sign-on SSO to your ASP.NET applications easily. The library also offers the flexibility, ease of use and rapid development features of a component without the complexities of in-depth knowledge of how the SAML is...
- Software downloads 2009-09-30
- .NET SAML Suite for C#,VB.NET,ASP.NET Vol4 (Windows)
- NetXtreme SAML2 is a .NET library with the capability to produce Adobe SAML2 files. It features a full-fledged object model for the easy creation of SAML2 files from any .NET language, providing complete control over the positioning of the elements in a SAML2 document. It does not use any external...
- Software downloads 2009-09-30
- SOAPSonar Personal Edition 4.5.5 (Windows)
- Free XML, SOAP, and REST based service testing. Functional, performance, compliance, and security testing modes. Full support for WSDL-based SOAP testing with comprehensive WSDL Schema parsing and SOAP message generation. Identity and security testing features including WS-Identity, WS-Security, SAML, WS-Trust, SSL. SOAPSonar is now HP Quality Center EMAP certified.Version 4.5.5...
- Software downloads 2009-07-28
- Intuit creates open source community
- Earlier today, I had a conversation with Alex Chriss and Alex Barnett of Intuit as they discussed the creation of code.intuit.com Intuit's open source community. This is a smart move and one that I'd suggested would be a welcome addition to IPP when we last spoke. In...
- Blog posts 2009-07-27
- Formal Analysis of SAML 2.0 Web Browser Single Sign-On: Breaking the SAML-Based Single Sign-on for Google Apps
- Single-Sign-On SSO protocols enable companies to establish a federated environment in which clients sign in the system once and yet are able to access to services offered by different companies. The OASIS Security Assertion Markup Language SAML 2.0 Web Browser SSO Profile is the emerging standard in this context. This...
- White papers 2008-10-27
- Performance Tuning Recommendations for Oracle Identity Federation
- Oracle Identity Federation, formerly known as Oblix ShareId, is a federation solution providing a self-contained and flexible multi-protocol federation server deployable with existing identity and access management systems. Federation enables organizations to create virtual communities for their employees as well as customers and partners with SSO capabilities. Federation delegates the...
- White papers 2008-10-01
- Google closes hole in Single Sign-On service
- Google has fixed an implementation flaw in the single sign-on service that powers Google Apps follow a warning from researchers that remote attackers can exploit a hole to access Google accounts. The vulnerability, described in this white paper (.pdf), affects the SAML Single Sign-On Service for Google...
- Blog posts 2008-09-10
- The Fastest Way to Scale Your Business to Business SSO Connections: PingFederate Auto-Connect
- This paper is written for project managers, product managers, identity architects and security architects who are considering large-scale deployments of secure Internet single sign-on. SAML-based federated identity has a proven track record for creating secure and reliable SSO connections between federation partners. However, organizations envisioning dozens, hundreds or even thousands...
- White papers 2008-07-31
- PKI and Federation: Realizing the Best of Both Worlds
- This technical paper, designed for solution architects and identity management consultants, compares and contrasts X.509 certificates as used within a Public Key Infrastructure PKI and federated identity deployments that leverage SAML, Open ID, or WS Federation. While X.509 is focused on authentication, federation delivers secure internet SSO and attribute sharing....
- White papers 2008-01-05
- Federated ESBs come to fore as natural outcome of guerrilla SOA practices
- Some IONA Technologies announcements today point up the growing practice of multiple ESBs within enterprises, often associated in a federated manner, and sometimes using ESBs tasked with specific types of integration duties. IONA is taking a "hybrid" approach to ESB offerings, with a coordinated open source and...
- Blog posts 2007-12-10
- Reputation taking center stage
- We hold the Internet Identity Workshop twice a year. One way to track the vector of developments in user-centric identity it to plot the gestalt of the workshop each year. Here's my characterization of that vector based on some earlier comments from Johannes Ernst: IIW2005:...
- Blog posts 2007-12-04
- Is security the SOA showstopper?
- A new report in InformationWeek by Andy Dornan calls SOA security "one treacherous journey."Vendors and committees have thrown a bewildering plethora of immature or incompatible security specs and solutions at usTreacherous indeed. SOA increasingly addresses services on both sides of the firewall, and therefore opens up the most critical business...
- Blog posts 2007-07-30
- Monkcast #9: With 11g, Oracle still dodging open source bullet & a patenting software debate
- Hard to believe we're at Monkcast #9 already. Time is flying. This week, the majority of the podcast focused on four issues. First, we talked a bit about 11g; the lastest and newest version of Oracle's namesake database announced this week. That led to a discussion of how...
- Blog posts 2007-07-13
- RSA Federated Identity Manager: A Technical Overview
- Federated identity management extends the management of digital identities for authorization and access beyond domain and corporate boundaries to externally hosted or managed applications and resources. This paper summarizes the concepts underlying federated identity, explores the standards and specifications that are emerging to support identity federation, including the Security Assertion...
- White papers 2007-07-01
- PingFederate 4.4 (Windows)
- PingFederate is the industry-leading, standards-based SAML federated identity server for enabling single sign-on SSO to online services for employees, customers and business partners. No other federated identity solution is as easy to install, integrate and scale. PingFederate reduces complexity, cost, and time-to-production through effortless configuration tools and the broadest range...
- Software downloads 2007-05-11
- U-Prove SDK Overview
- Credentica's U-Prove SDK brings multi-party security and superior system scalability to identity and access management. The SDK enables organizations to protect identity-related assertions with unprecedented security, thereby opening up new dataflow capabilities. At the same time, the SDK enables critical privacy and user control functions that are particularly relevant to...
- White papers 2007-04-16
- Grading our identity predictions from 2006
- At the beginning of 2006, we posted a list of predictions over on Digital ID World for the upcoming year in identity. In keeping with our historical tradition, Id like to grade our past performance prior to looking toward the future.Accordingly, Ill grade our predictions on a scale of 1-5...
- Blog posts 2006-12-13
- Internet Identity Workshop demonstrations steal the show
- One of the hallmarks of the Internet Identity Workshop IIW is the high ratio of getting-stuff-done to idle chat and marketing drivel. I remarked at the closing session that this wasnt a workshop in the usual sense of "conference not quite grown up." This really is a...
- Blog posts 2006-12-07
- Internet Identity Workshop and interop
- Kaliya Hamlin, Doc Searls, and I will be doing another installment of the Internet Identity Workshop (IIW2006b) in December. Were back at Computer History Museum, Dec 4-6. The Interenet Identity Workshop is about moving user-centric identity ideas and technologies forward. User-centric identity starts with the...
- Blog posts 2006-11-16
- Federation enters a new phase
- Two recent releases in the federated identity marketplace caught my eye -- and may speak to the development of federation deployments:1. Ping Identity announced that the U.S. Department of Justice selected them to provide federation to over 7,300 local law enforcement agencies and 700,000 law enforcement officials. (Disclosure: I was...
- Blog posts 2006-11-16
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- Microsoft Dynamics CRM Online - Free Six-Month Trial for Eligible Organizations
-
Microsoft Dynamics CRM Online provides fast online access, simple contact management and better sales performance for a low monthly cost - the best value on the market today.
- Learn more about the free, six-month trial offer>>
- The best support in the Linux business
-
If Linux is going to power your mission-critical applications, you'd better have the best support known to business. Novell was rated the top provider of Linux technical support.
- Learn more >>
- Learn more about tools to grow your business
-
The Business Essentials Guide provides you useful tools and templates to help grow your business and save you time with automated shipping solutions.
- Save time with the UPS Business Essentials Guide
- Reduce risk. Reduce complexity. Increase reliability.
-
A simplified IT environment isn't just less complex. It's also more reliable. Standardize on a single Linux platform with SUSE Linux Enterprise from Novell, and get the world's most interoperable Linux
- Learn more >>
SmartPlanet
- Thought-provoking progressive ideas on diverse topics that intersect with technology, business, and life, and matter to the world at large. Visit SmartPlanet
- More from IBM
-
- Can your business work smarter? Learn more about Lotus Symphony
- Learn how to work smarter and optimize cost using the IBM Smart SOA approach Download the eBook
- Smarter ways to make smarter products Read the brief from IBM
