What is SAML?
SAML is a widely used open standard that enables Single Sign On by allowing an identity provider such as Okta or Microsoft Entra to securely pass authentication information to a service provider such as Salesforce, Workday, or ServiceNow. When a user attempts to access a SAML enabled application, the service provider redirects them to the identity provider for authentication, which then issues a digitally signed XML assertion confirming the user’s identity and attributes back to the service provider. SAML eliminates the need for users to maintain separate credentials for each application, while giving organizations central control over authentication policies. Although newer protocols like OIDC are increasingly used for modern applications, SAML remains prevalent in enterprise environments with legacy systems.
