{"id":3641,"date":"2018-10-31T10:36:56","date_gmt":"2018-10-31T14:36:56","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=3641"},"modified":"2018-11-08T11:45:50","modified_gmt":"2018-11-08T15:45:50","slug":"crash-course-saml-101-and-identity-federation-with-ping-identity","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/","title":{"rendered":"Crash Course: SAML 101 and Identity Federation (With Ping Identity)"},"content":{"rendered":"

\"Crash<\/p>\n

We here at the Solutions Review Cybersecurity Desk<\/a> do our best to cut through security technical jargon: explain it, simplify it, or work through it to better illustrate the threat landscape and solution capabilities. We want to present the information in a clear and engaging voice for businesses. \u00a0\u00a0<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

However, this is not always possible. Attempting to simplify certain technical terms, especially in identity and access management (IAM), can impede careful and accurate solution decision-making for enterprises. When this occurs, only by exploring the term\u2014and the technology behind it\u2014can decision-makers gain the clarity they need in IAM. <\/span><\/p>\n

Security Assertion Markup Language\u2014SAML<\/a>\u2014is one of these terms. <\/span><\/p>\n

What is SAML? How does it function, and why should your enterprise care? To give you a crash course in this confusing yet essential terminology, we read through \u201cSAML 101<\/a>,\u201d a whitepaper by IAM and identity governance solution provider Ping Identity<\/a>. <\/span><\/p>\n

Here\u2019s what we learned: <\/span><\/p>\n

The Context for SAML and Federation<\/b><\/h3>\n

Applications have become an essential part of enterprises\u2019 digital workplaces, whether they operate on-premises or remotely via the cloud. Applications have allowed for great productivity and communication than ever considered possible before. <\/span><\/p>\n

To meet with the demands of modern businesses, applications\u2019 hosting systems have evolved. They need to be available and accessible regardless of employees\u2019 physical location or device. <\/span><\/p>\n

However, what has not changed are the access demands these applications place upon enterprises. Applications operating on different security domains or outside the network firewall requires their own log-ins each time they are accessed. Each time, this requires time and energy to find and enter the password\u2014compounded by the number of requests encountered each day. <\/span><\/p>\n

Furthermore, each has its own password and account demands, which only compounds the significant password issues enterprises continue to deal with today. <\/span><\/p>\n

We here at Solutions Review have covered some of these password issues in some detail in the past. Forcing your users to remember dozens if not hundreds of user accounts and passwords can lead to its own security vulnerabilities. Users often respond to password demands by picking incredibly simple passwords (\u201cpassword123\u201d is still in common use) or using a repeated password (which increases the chances of successful credential stuffing utilizing previously stolen passwords). It can also prompt users to write down their passwords in a physical location, a different kind of vulnerability. \u00a0\u00a0<\/span><\/p>\n

SAML and Identity Federation <\/b><\/h3>\n

In this context, identity federation and single sign-on are necessary for enterprises to provide access to all web applications in a scalable and cost-effective manner. Single sign-on allows users to input their credentials once and have it apply to all relevant applications. <\/span><\/p>\n

More specifically, federated identity uses single sign-on to establish employee and user identity, and then\u2014as the user attempt to access applications\u2014the solution transparently and securely shares their credentials with the application. This allows users and employees to skip the usual log-in step and enjoy a seamless digital workplace experience. <\/span><\/p>\n

SAML is part of this standards-based identity federation. SAML alleviates log-in issues by enabling single sign-on and the secure exchange of authentication and authorization information between security domains. <\/span><\/p>\n

At its most basic, when a user attempts to access a service provider with an identity federation solution, the federation software creates a SAML authentication request and delivers it to the appropriate identity provider. The identity provider authenticates the user and creates its own SAML assertion representing the user identity and attributes. This is transmitted to the security provider, which shares the relevant information with the desired application to gain access. \u00a0\u00a0<\/span><\/p>\n

There is far more to SAML than that, including distinct use cases and relationships with WS-Trust, OAuth 2.0, and OpenID Connect. To learn about SAML and standards-based identity federation in more detail, you can read the \u201cSAML 101<\/a>\u201d white paper provided for free courtesy of Ping Identity<\/a>. \u00a0<\/span><\/p>\n


Widget not in any sidebars
<\/p>\n","protected":false},"excerpt":{"rendered":"

We here at the Solutions Review Cybersecurity Desk do our best to cut through security technical jargon: explain it, simplify it, or work through it to better illustrate the threat landscape and solution capabilities. We want to present the information in a clear and engaging voice for businesses. \u00a0\u00a0 However, this is not always possible. […]<\/p>\n","protected":false},"author":41,"featured_media":3462,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[142,125,16,67,76,354,286,397,188,63,307],"acf":[],"yoast_head":"\nCrash Course: SAML 101 and Identity Federation (With Ping Identity)<\/title>\n<meta name=\"description\" content=\"What is SAML? How does it function, and why should your enterprise care? We give you a crash course in this confusing yet essential terminology.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/\",\"name\":\"Crash Course: SAML 101 and Identity Federation (With Ping Identity)\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/08\/Books-redo-MOD.jpg\",\"datePublished\":\"2018-10-31T14:36:56+00:00\",\"dateModified\":\"2018-11-08T15:45:50+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"What is SAML? How does it function, and why should your enterprise care? We give you a crash course in this confusing yet essential terminology.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/08\/Books-redo-MOD.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/08\/Books-redo-MOD.jpg\",\"width\":800,\"height\":433,\"caption\":\"Crash Course: SAML 101 and Identity Federation (With Ping Identity)\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Crash Course: SAML 101 and Identity Federation (With Ping Identity)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Crash Course: SAML 101 and Identity Federation (With Ping Identity)","description":"What is SAML? How does it function, and why should your enterprise care? We give you a crash course in this confusing yet essential terminology.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/","url":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/","name":"Crash Course: SAML 101 and Identity Federation (With Ping Identity)","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/08\/Books-redo-MOD.jpg","datePublished":"2018-10-31T14:36:56+00:00","dateModified":"2018-11-08T15:45:50+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"What is SAML? How does it function, and why should your enterprise care? We give you a crash course in this confusing yet essential terminology.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/08\/Books-redo-MOD.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/08\/Books-redo-MOD.jpg","width":800,"height":433,"caption":"Crash Course: SAML 101 and Identity Federation (With Ping Identity)"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/crash-course-saml-101-and-identity-federation-with-ping-identity\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Crash Course: SAML 101 and Identity Federation (With Ping Identity)"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/3641"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=3641"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/3641\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/3462"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=3641"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=3641"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=3641"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}