SAML

Security Assertion Markup Language (SAML)

SAML is the XML Framework for exchanging security information across the internet. SAML does not provide Identity management, security algorithm.SAML just provide the security exchanging framework.Same as M$ Passport but it can be use with any product.

Advantage: Single Sign On (SSO) , Limitations of Browser Cookies (cannot cross session), Identiy Federation, and Web Services.

SAML has 4 layers: Assertion, Protocol, Binding, and Profile

1. Assertion -> Key with associate to the subject (Authen, Attribute, Authorization)
2. Protocol -> Request and Response pairs for obtaining assertions [Service Provide <--> Identity provider]
3. Binding -> Map SAML message with SOAP
4. Profile -> Set of rules describing how SAML assertions are exchanged, e.g., Browser/POST profile. It combines assertion, protocol and binding for specific scenario (Web SSO Profile)

This is an SAML example.

Reference: http://www.infoq.com/presentations/saml