Glossary
SECURITY ASSERTION MARKUP LANGUAGE / SAML
defined.
An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider.
A–Z
An XML-based standard for exchanging authentication and authorization data between an identity provider and a service provider.
SAML 2.0 remains common in enterprise SSO (Okta, ADFS, Ping). Security risks are XML-specific: signature wrapping attacks, XXE on the parser, replay attacks, and weak certificate validation.
See our web application penetration testing, API security testing, network penetration testing, and cloud security audit services for how we test for and defend against this class of issue.
30-minute call with an OSCP-certified engineer. Tailored proposal in 24 hours.