SAML is the Security Assertion Markup Language.

SAML is a derivative of XML which is designed for the exchange of authentication and authorization data.

The purpose of SAML is to enable Single Sign-On for web applications.

SAML utilizes TLS to ensure the confidentiality of authentication and authorization data during transit.

SAML Standards

SAML is defined by the Organization for the Advancement of Structured Information Standards (OASIS).

saml-conformance-2.0-os Conformance Requirements
saml-core-2.0-os Assertions and Protocols
saml-bindings-2.0-os Bindings
saml-profiles-2.0-os Profiles
saml-metadata-2.0-os Metadata
saml-authn-context-2.0-os Authentication Context
saml-sec-consider-2.0-os Security and Privacy Considerations
saml-glossary-2.0-os SAML Glossary

SAML Alternatives

WS-Security is a SOAP-based protocol for sharing authentication and authorization information.

WS-Security was developed developed by IBM, Microsoft, and Verisign.

The WS-Security standard has now been transferred to OASIS for further development.