Security Assertion Markup Language (SAML)
Definition
SAML standardizes the exchange of login and authorization information.
An OASIS standard for exchanging authentication and authorization information, commonly used for browser-based single sign-on.
Simply explained
A login service transmits a confirmed digital proof of login to an application.
Why it matters in practice
The term contributes to secure, maintainable, and high-performance web applications as well as resilient technical decisions.
Example from business
An identity provider sends a signed login assertion to a SaaS service.
Limits and pitfalls
- Confusing SAML with OAuth, incorrectly verifying signatures, or leaving redirect targets open.
Origin & history
SAML 2.0 was standardized in 2005 as a consolidation of earlier SAML versions.
Use in mid-sized companies
- Possible example: An identity provider sends a signed login assertion to a SaaS service.
Frequently asked questions
What does Security Assertion Markup Language (SAML) mean?
An OASIS standard for exchanging authentication and authorization information, commonly used for browser-based single sign-on. What mistakes should be avoided? Confusing SAML with OAuth, incorrectly verifying signatures, or leaving redirect targets open.
Sources
Source checked on 10.10.2026. Editorial application examples are hypothetical; no evidence of real customer results.
Editorially reviewed on: