All IAM glossary termsProtocols · glossary
SAML 2.0
Also known as: SAML · Security Assertion Markup Language
Definition
SAML 2.0 (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between an identity provider (IdP) and a service provider (SP).
In more depth
SAML is the dominant standard for enterprise SSO. The IdP authenticates a user and produces a signed XML assertion containing claims (the user's identity, group memberships, attributes). The SP validates the signature, checks freshness and audience restrictions, and grants access.
While SAML is older than OIDC and less mobile-friendly, it remains the workhorse for B2B SSO and enterprise integrations. Most enterprise SaaS apps support SAML 2.0 as a first-class authentication option.
Want the work, not just the definition?