Definition
SAML, or Security Assertion Markup Language, is an open standard for exchanging authentication and authorization data between parties, specifically between an identity provider and a service provider. It allows users to log in once with a single set of credentials and gain access to multiple independent software systems. SAML works by enabling the identity provider to send a security token containing assertions about the user's identity and permissions to the service provider. This process is crucial for enabling single sign on SSO and streamlining user access across different applications, enhancing both security and user experience. For instance, when you log into a cloud application using your company's existing credentials, SAML is likely the technology facilitating that secure connection. Unlike OAuth, which focuses on delegated authorization for specific resources, SAML is primarily concerned with authenticating users and asserting their identity. You will encounter SAML concepts on exams like CompTIA Security+, CySA+, and CISSP.