(Security Assertion Markup Language) An XML-based format from OASIS for exchanging security information for single sign-on. The "assertions" are statements from a SAML authority that authenticate a user, confirm some attribute about the individual and grant or deny authorization. SAML provides only the message format and must be used with protocols that perform the authentication service. See XACML and single sign-on.
 | Reproduced with permission from Computer Desktop Encyclopedia. Copyright (c) 1981-2008 The Computer Language Company Inc. All rights reserved. |
Additional Resources
- Google closes hole in Single Sign-On service
- Google has fixed an implementation flaw in the single sign-on service that powers Google Apps follow a warning from researchers that remote attackers can exploit a hole to access Google accounts. The vulnerability, described in this white paper (.pdf), affects the SAML Single Sign-On Service for Google...
- Blog posts 2008-09-10
- Federated ESBs come to fore as natural outcome of guerrilla SOA practices
- Some IONA Technologies announcements today point up the growing practice of multiple ESBs within enterprises, often associated in a federated manner, and sometimes using ESBs tasked with specific types of integration duties. IONA is taking a "hybrid" approach to ESB offerings, with a coordinated open source and...
- Blog posts 2007-12-10
- Reputation taking center stage
- We hold the Internet Identity Workshop twice a year. One way to track the vector of developments in user-centric identity it to plot the gestalt of the workshop each year. Here's my characterization of that vector based on some earlier comments from Johannes Ernst: IIW2005:...
- Blog posts 2007-12-04
- Is security the SOA showstopper?
- A new report in InformationWeek by Andy Dornan calls SOA security "one treacherous journey."Vendors and committees have thrown a bewildering plethora of immature or incompatible security specs and solutions at usTreacherous indeed. SOA increasingly addresses services on both sides of the firewall, and therefore opens up the most critical business...
- Blog posts 2007-07-30
- Monkcast #9: With 11g, Oracle still dodging open source bullet & a patenting software debate
- Hard to believe we're at Monkcast #9 already. Time is flying. This week, the majority of the podcast focused on four issues. First, we talked a bit about 11g; the lastest and newest version of Oracle's namesake database announced this week. That led to a discussion of how...
- Blog posts 2007-07-13
- PingFederate (zip)
- PingFederate is the industry-leading, standards-based SAML federated identity server for enabling single sign-on SSO to online services for employees, customers and business partners. No other federated identity solution is as easy to install, integrate and scale. PingFederate reduces complexity, cost, and time-to-production through effortless configuration tools and the broadest range...
- Software downloads 2007-05-11
- U-Prove SDK Overview
- Credentica's U-Prove SDK brings multi-party security and superior system scalability to identity and access management. The SDK enables organizations to protect identity-related assertions with unprecedented security, thereby opening up new dataflow capabilities. At the same time, the SDK enables critical privacy and user control functions that are particularly relevant to...
- White papers 2007-04-16
- Grading our identity predictions from 2006
- At the beginning of 2006, we posted a list of predictions over on Digital ID World for the upcoming year in identity. In keeping with our historical tradition, Id like to grade our past performance prior to looking toward the future.Accordingly, Ill grade our predictions on a scale of 1-5...
- Blog posts 2006-12-13
- Internet Identity Workshop demonstrations steal the show
- One of the hallmarks of the Internet Identity Workshop IIW is the high ratio of getting-stuff-done to idle chat and marketing drivel. I remarked at the closing session that this wasnt a workshop in the usual sense of "conference not quite grown up." This really is a...
- Blog posts 2006-12-07
- Internet Identity Workshop and interop
- Kaliya Hamlin, Doc Searls, and I will be doing another installment of the Internet Identity Workshop (IIW2006b) in December. Were back at Computer History Museum, Dec 4-6. The Interenet Identity Workshop is about moving user-centric identity ideas and technologies forward. User-centric identity starts with the...
- Blog posts 2006-11-16
- Federation enters a new phase
- Two recent releases in the federated identity marketplace caught my eye -- and may speak to the development of federation deployments:1. Ping Identity announced that the U.S. Department of Justice selected them to provide federation to over 7,300 local law enforcement agencies and 700,000 law enforcement officials. (Disclosure: I was...
- Blog posts 2006-11-16
- A tipping point?
- Way back in the early mists of identity time, I was speaking with Bryan Field-Elliott then CTO of Ping Identity about the earliest drafts of the Liberty Alliance protocols, and whether or not they could be used for what we then called "internet identity." (Note: "internet identity" is now called...
- Blog posts 2006-10-20
- Novell Access Manager 3: Access Control, Policy Management and Compliance Assurance
- Novell Access Manager is the next-generation access management and federated identity solution from Novell. Organizations use Access Manager to control internal and external users' access to network content, applications and services. Its key components - those that provide identity management and federation - are founded on industry-leading standards, including Liberty...
- White papers 2006-10-01
- Microsoft: oops, here's three more Web services patents
- Earlier this week, we and many other sites across the industry reported on Microsoft's announcement that it was freeing up patents related to 35 Web services, mainly an assortment of key WS-* specs, along with the widely used SOAP and WSDL standards. Now, make that 38.A reliable...
- Blog posts 2006-09-15
- Responding to Dana's views on federated identity
- Blog note: This is a guest column that comes to us from Andre Durand, CEO of Ping Identity corporation.I read with frustration a recent article posted by Dana Blankenhorn titled "Too late for federated identity�. Perhaps my reaction was mostly to the title, which assumed to make broad stroke assessments...
- Blog posts 2006-09-01
- Too late for federated identity?
- Too late for federated identity?The right time for Liberty"[...] what about the Liberty Alliance? They are still around. Sun was one of the original sponsors. Have you used that lately? I haven't."Ask the average person in the street if they've used TCP/IP lately. Or GSM. Or CDMA.The thing with...
- Discussion threads 2006-08-29
- Pushing back on Google's identity silo
- Ben Laurie, an employee of Google who is quite clear about the fact that he does not represent Google itself, is responding to my earlier post contrasting Google and Microsoft. Ben's pushing back on my contrasting of Google's Account Authentication versus Microsoft's Live ID, and my treatment therein. Specifically: ...
- Blog posts 2006-07-23
- Java XML Digital Signatures
- Extensible Markup Language XML technology is now an integral part of web-based business applications. These applications require a fundamentally sound and secure infrastructure to meet the security requirements of confidentiality, endpoint authentication, message integrity, and nonrepudiation. XML signature, XML encryption, XML Key Management Specification XKMS, Security Assertion Markup Language SAML,...
- White papers 2006-07-01
- D: Walt Mossberg's security lessons
- Walt Mossberg has a dream. His computer will not make him feel like he is a part-time systems administrator. During an interview with RSA Security CEO Art Coviello and Symantec CEO John Thompson, Walt asked, "When will you protect my computer without annoying and bothering me…and stop telling me the...
- Blog posts 2006-06-01
- The top 10 most important people in Identity
- The top 10 most important people in IdentityAdd Dave Kearns to the listHi Eric -- thanks for the "little guys" reference from TNT. I've added it to our knowidentity.com blog. I would add Dave Kearns to that list. He is consistently and persistently contributing to the identity story in his...
- Discussion threads 2006-05-05
Neighboring Terms
Premier Vendor Content Whitepapers, webcasts & resources from our Power Center Sponsors
- BNET Industries
- Check out BNET's newest resource for managers and executives. Need to do research on your competitors? Don't have time to read every trade pub? BNET Industries is the new source for daily news, insights, and research on 11 major industries and 9,000 public companies.
-
- The technology industry from a different angle
-
- See what's hot in the auto industry
-
- Stay on top of the energy industry
