tag: saml
SAML
The Security Assertion Markup Language: assertions, bindings, metadata and how SAML single sign-on works.
Articles
- Federation
Using an LDAP Attribute Store in AD FS
How to add an LDAP attribute store to AD FS, connect it to AD LDS or another directory, and use it in claim rules for attributes AD does not hold.
- Federation
SP-Initiated SSO on .NET: From WIF to Modern Libraries
How service provider initiated sign-in works, why Windows Identity Foundation only covered WS-Federation, and the options for SAML 2.0 and OIDC on ASP.NET Core.
- Federation
Microsoft 365 and SAML 2.0: Federating Entra ID With Your IdP
How Microsoft 365 sign-in works through Microsoft Entra ID, when to federate a domain with a third-party SAML 2.0 identity provider, and the settings that matter.
- Authorization
XACML With OpenID Connect, SAML, OAuth and SCIM: Who Does What
Five identity standards, five jobs: SAML and OIDC authenticate, OAuth delegates API access, SCIM provisions accounts and XACML evaluates authorization policies.
- Cloud computing
Cloud Security Standards: Frameworks and Identity Specs
Which standards matter for cloud security: CSA Cloud Controls Matrix, ISO/IEC 27001, 27017 and 27018, SOC 2, plus the identity specs (SAML, OIDC, SCIM) behind them.
- Federation
Federation and Entitlement Management: How They Fit Together
Federation tells an app who the user is; entitlement management decides what they may do. How SAML, OIDC, SCIM and policy engines divide the work.
- Cloud computing
Calling On-Premises Web Services From the Cloud, Securely
How cloud apps can call web services that still live in your data center: gateways, mTLS, token exchange and why you should not just open a firewall port.
Guides
- Topic guide
The social corridor: identity brokering explained
How an identity broker sits between apps and many identity providers, turning social logins, enterprise SAML and OIDC into one consistent token.
- IAM building block
What is identity federation?
How identity federation works: identity providers and relying parties, SAML 2.0 and OpenID Connect trust, metadata, certificates and common pitfalls.
- Product overview
PingFederate overview
What PingFederate is: Ping Identity's self-managed federation server for SAML, OpenID Connect and OAuth. Architecture, uses, hardening and alternatives.