How deeply does Authorization in Action cover Security Assertion Markup Language?

Defines SAML's SSO role and endpoints but does not detail XML assertions, message flows, or security controls.

Security Assertion Markup Language

SAML is an XML-based standard for exchanging authentication, authorization, and identity information between security domains.

Security Assertion Markup Language (SAML) is an XML-based standard for exchanging identity information across security domains. It supports single sign-on (SSO) by passing identity assertions from an identity provider (IdP) to a service provider (SP), allowing authentication and authorization decisions to use synchronized account state. section 3.3.2

SAML participates in organizational identity propagation by:

Passing identity assertions between federated systems. section 3.3.2
Supporting consistent authentication and authorization decisions as account data changes. section 3.3.2
Working alongside SCIM for provisioning, LDAP for directory management, and OIDC for signed identity tokens. section 3.3.2

How Authorization in Action covers it

liveBook manning.com

Read Authorization in Action on liveBook Get the book at manning.com

Related concepts

openid connectalternative to · OpenID Connect is an identity layer built on OAuth 2.0 that enables clients to authenticate end users and obtain standardized identity claims.
federated identity integrationused by · Federated identity integration is an arrangement in which systems or organizations trust identity and authentication assertions exchanged across their boundaries.
single sign-onused by · Single sign-on is an authentication arrangement in which one authentication event enables a user to access multiple applications or services without signing in separately to each.
xmluses · XML is a text-based markup language for encoding structured documents and data using elements, attributes, and nested relationships.
OAuthcontrasts with · OAuth is an authorization framework that enables a client to obtain limited, delegated access to protected resources without receiving the resource owner's credentials.
credentialuses · A credential is information or an artifact presented as evidence of an entity’s identity, qualifications, status, or authorization to access a system or resource.

This explainer was generated by Manning's knowledge graph from the text of Authorization in Action. The section links point to the parts of the book it draws on.