Beginner LevelAuthentication & Authorization
What is SAML 2.0 (Security Assertion Markup Language) and where is it used?
❓ Interview Prompt: Explain SAML 2.0 XML assertions, Identity Providers (IdP), Service Providers (SP), and enterprise SSO integration.
SAML 2.0 (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization assertions between an enterprise Identity Provider (IdP) and a Service Provider (SP).
Key Features:
•
Format: Uses XML payloads signed with X.509 digital certificates.
•
Widespread Enterprise Adoption: Standard protocol for enterprise IdPs like Okta, Ping Identity, and Microsoft Active Directory / Azure AD.
•
SAML Assertions: Transmits XML statements containing user identity ('NameID'), attributes (email, group memberships), and session validity rules.
Code Implementation Example
xml
<!-- Simplified SAML 2.0 Assertion snippet -->
<saml:Assertion ID="_a1b2c3" IssueInstant="2026-07-27T12:00:00Z" Version="2.0">
<saml:Issuer>https://idp.enterprise.com</saml:Issuer>
<saml:Subject>
<saml:NameID Format="urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress">user@enterprise.com</saml:NameID>
</saml:Subject>
<saml:AttributeStatement>
<saml:Attribute Name="Role"><saml:AttributeValue>Manager</saml:AttributeValue></saml:Attribute>
</saml:AttributeStatement>
</saml:Assertion>💡SAML 2.0 XML Assertion snippet containing NameID and role attributes.
🎯 Interview Key Takeaway
SAML 2.0 is an XML-based enterprise SSO standard using X.509 signed assertions to exchange identity between IdPs and SPs.
#SAML#Enterprise SSO#XML#IdP#Beginner
Back to all Authentication & Authorization Questions→