SAML web single sign-on
SAML uses assertions to provide vendor-neutral SSO interoperability for transferring information between federation business partners. A SAML assertion is an XML-formatted token used to transfer user identity and attribute information from a identity provider to a trusted service provider.
- A web user authenticates to a SAML identity provider such as IBM Security Identity Manager or ForgeRock Identity Gateway, which produces a SAML assertion.
- A WebSphere SAML service provider consumes the assertion and establishes a security context.
SAML 2.0 protocols are HTTP-redirect based. Binding options include...
| SAML HTTP redirect | Most common usage. |
| SAML HTTP POST | Sometimes called Browser POST. SAML protocol messages can be transmitted within an HTML form using base64-encoded content. The provider and consumer communicate using an HTTP user agent as an intermediary. |
| SAML HTTP artifact | |
| SAML SOAP | |
SAML 2.0 Web Browser SSO Profile is defined to support web single sign-on. A web user either accesses a resource at a service provider, or accesses an identity provider such that the service provider and desired resource are understood or implicit. The web user authenticates to the identity provider, which then produces an authentication assertion, and the service provider consumes the assertion to establish a security context for the web user.
Subtopics
- SAML single sign-on scenarios
- Use the SAML web SSO feature
- Configure SSO partners with a WAS-based SAML service provider
- Enable SAML SP-Initiated web SSO
- SAML web SSO TAI custom properties
- Add SAML web SSO trust association interceptor (TAI)
- Establish security context for web services clients using SAML security tokens
- Delete SAML web SSO identity provider (IdP) partner
- Delete SAML web SSO trust association interceptor (TAI)
- Export SAML web service provider metadata
- Import SAML identity provider (IdP) partner metadata
- Display SAML identity provider (IdP) partner configuration
- Display SAML web SSO trust association interceptor (TAI) configuration
- Configure SAML Web Inbound TAI
- SAML Web Inbound TAI Custom Properties
See also