{"id":34040,"date":"2022-03-01T13:00:00","date_gmt":"2022-03-01T18:00:00","guid":{"rendered":"https:\/\/jumpcloud.com\/?p=34040"},"modified":"2024-02-05T09:54:11","modified_gmt":"2024-02-05T14:54:11","slug":"what-is-saml","status":"publish","type":"post","link":"https:\/\/jumpcloud.com\/blog\/what-is-saml","title":{"rendered":"What is SAML (Security Assertion Markup Language)?"},"content":{"rendered":"\n<p>As IT continues to shift toward the cloud and Software-as-a-Service (SaaS) applications, SAML is an important topic when considering authentication options. SAML also uniquely provides authorization that can be used to enforce user permissions on services. Let\u2019s explore SAML, how it works, its history and benefits, how you can use it, and how it compares to its alternatives.<\/p>\n\n\n\n<figure class=\"image is-16by9\">\n<iframe class=\"has-ratio\" width=\"300\" height=\"315\" src=\"https:\/\/www.youtube.com\/embed\/7RrFhC-e8QA?rel=0\" frameborder=\"0\" allow=\"accelerometer; autoplay; encrypted-media; gyroscope; picture-in-picture\" allowfullscreen=\"\"><\/iframe>\n<\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">What Is SAML SSO?<\/h2>\n\n\n\n<p>The Security Assertion Markup Language (SAML) protocol is the go-to for many web application single sign-on (SSO) providers and is used to securely connect users to web applications with a single set of credentials. SAML utilizes Extensible Markup Language (XML) certificates to assert user authentications between an identity provider (IdP) and a service provider (SP) or web application. <\/p>\n\n\n\n<p>Users can create a single, strong password to secure their IdP credentials without having to worry about keeping their web app passwords written out in a document or on a sticky note attached to their monitor, or having to leverage password managers to store credentials. (Note that you can still benefit from an <a href=\"https:\/\/jumpcloud.com\/blog\/need-single-sign-on-password-manager\">SSO password manager<\/a>, though.)<\/p>\n\n\n\n<p>In short, it\u2019s web-based single sign-on (SSO). That\u2019s a lot of acronyms, but they will make more sense once we dive into how SAML works.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What Is SAML 2.0?<\/h3>\n\n\n\n<p>SAML 2.0 is the current version of the SAML standard. It was a substantial update that wasn\u2019t backward compatible with its predecessor and added features that had been included in the Liberty Alliance Identity Federation Framework, making it significantly more robust and mature. Single logout (across services) was one of the most significant improvements.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">The Benefits of SAML<\/h2>\n\n\n\n<p>There are numerous benefits to using SAML. Security and relative ease of managing credentials are clear wins: end users do not need to remember all of the passwords necessary to access their various web apps. The assertion process uses secure XML communication via SAML directly between the SP and IdP, and passwords aren\u2019t stored on remote servers or sent over the wire. Overall, IT admins gain centralized user lifecycle management with very granular control over what resources users may access. This characteristic is ideal for regulated industries that must take stringent measures to secure data confidentiality and privacy rights.<\/p>\n\n\n\n<p>IT admins generally experience a reduction in password-related help desk tickets in addition to increased security through SAML, and the ability to layer on strong, user-friendly multi-factor authentication (MFA), such as Push MFA, and protections against phishing. SSO also reduces the risks of shadow IT, which is when users manage their own access to applications under IT\u2019s radar. End users, having to only worry about a single password, experience less password fatigue with SSO as well.&nbsp;<\/p>\n\n\n\n<p>Many SSO providers have created web portals where end users can log in once and then click on a tile with the application they need to access, which offers another incentive to adopt SAML.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Examples of SAML in Action<\/h2>\n\n\n\n<p>The aforementioned SSO portal is a good example of how SAML can drive IT synergies within small and medium-sized enterprises (SME). This process is often referred to as \u201cSAML flow,\u201d when users click on an application icon and authentication occurs behind the scenes.&nbsp;<\/p>\n\n\n\n<p>Another use case leverages user attributes to determine which part of an application they should have access to. For example, someone who\u2019s an accounting clerk shouldn\u2019t have the same level of access as a CFO. It reinforces the security concept of separation of duties and helps to ensure adherence to least privilege, essential to a robust Zero Trust security model.&nbsp;<\/p>\n\n\n\n<p>JumpCloud uniquely leverages attribute-based access control (ABAC) to provide an instant cross-check of users within a group to the apps and resources they need, and includes suggestions to modify group memberships. This differs from traditional role-based and nested access control methods that weren\u2019t originally designed for SaaS-based IT infrastructures.<\/p>\n\n\n\n<p>Developers can also use SAML as a solution to secure backend web services using a feature called SAML message protection. SAML is extremely flexible and customizable.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"692\" height=\"190\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/06\/1.2.png\" alt=\"\" class=\"wp-image-63889\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/06\/1.2.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/06\/1.2-300x82.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><\/figure>\n\n\n\n<p><em>The JumpCloud User Portal leverages SAML<\/em><\/p>\n\n\n\n<h2 class=\"wp-block-heading\">How Does SAML Work?<\/h2>\n\n\n\n<p>The process of SAML is, in essence, a series of exchanges between the user, a service provider (who hosts the web application the user wants to access), and an identity provider (which is the means by which the user can authenticate). When a user wants to access a web application, they first visit the service via an \u201cagent,\u201d which is almost always a standard web browser like Chrome, Firefox, Safari, or Edge. The agent then attempts to request access from the SP by logging into the web application.&nbsp;<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Components of SAML<\/h3>\n\n\n\n<p>The exchange of identity information about authentication and authorization is made possible through SAML\u2019s core components functioning as a system. This section outlines each component and its role in enabling SAML\u2019s message\/response framework that makes it possible to federate identities and user information across domains. First, let\u2019s examine a visualization of the basic steps of a transaction via the SAML protocol.This example illustrates what happens underneath the covers when a user enters their company credentials into a service that your organization uses.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"692\" height=\"385\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/06\/2.2.png\" alt=\"\" class=\"wp-image-63890\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/06\/2.2.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/06\/2.2-300x167.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><\/figure>\n\n\n\n<h4 class=\"wp-block-heading\">Bindings<\/h4>\n\n\n\n<p>Bindings are the infrastructure that make SAML messages transfer over common networking protocols. For instance, an HTTPS POST binding defines how to transport a SP\u2019s responses to requests from a user agent (web browsers).<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Protocols<\/h4>\n\n\n\n<p>How do most users establish secure connections to web services? HTTPS is an example of one of the protocols, along with SOAP, that\u2019s specified within the SAML standard. Digital certificates (X.509 certificate) are used on the IdP and SP sides for secure communications.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Profiles<\/h4>\n\n\n\n<p>Profiles are the glue that bundle SAML\u2019s protocols, bindings, and assertions for each use case. JumpCloud simplifies this concept by making a library of hundreds of \u201cconnectors\u201d available to users, to spare them the heavy lifting.&nbsp;<\/p>\n\n\n\n<p>The next section details how assertions work, which are XML packets that contain organizational information about the user, the method of authentication, as well as policies that specify access to resources and transaction logs.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">What Is SAML Assertion?<\/h3>\n\n\n\n<p>The SP has been administratively set to defer its authentication to a specific source of authentication \u2014 the IdP or user database, if you will. Login is then securely redirected via the internet (and through the browser) to request an authentication from the identity provider to verify the user\u2019s identity.&nbsp;<\/p>\n\n\n\n<p>From the user\u2019s perspective, this acts as a redirection to another website that contains a simple user interface with a username and password field. The user then enters their IdP credentials, which in turn verifies them against its own records.&nbsp;<\/p>\n\n\n\n<p>Upon successful verification, the IdP will generate an XML-based certificate, <a href=\"https:\/\/jumpcloud.com\/blog\/what-is-saml-assertion\">referred to as an assertion<\/a>. This means the IdP is generating a figurative \u201chall pass,\u201d claiming it knows the user and they may gain entrance to the requested application. This certificate is relayed back to the user\u2019s browser and then on to the service provider, redirecting the page back to the service so it can ingest the \u201chall pass\u201d and permit the user to enter. Note that in some more sophisticated flows, more data is returned by the IdP, including attributes, group membership, and more, to help the service provider accurately assign authorization rights as well as provide additional data that the SP may need to better serve the user.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">IdP and SP with SAML<\/h3>\n\n\n\n<p>The exchange of information occurs between the IdP and SP. As demonstrated above, providers use SAML to relay credentials between an identity provider, which contains the credentials to verify a user, and a service provider, which is the resource that requires authentication. The process can be initiated by either party, but the IdP is the one that\u2019s responsible for securing and managing user identities and directory groups. Accounts stored within an IdP ultimately become verified users on a service through SAML <a href=\"https:\/\/jumpcloud.com\/blog\/identity-federation-services\">identity federation<\/a>.<\/p>\n\n\n\n\n\n<p>SAML can be used in combination with other authentication standards depending on the use case. For example, an SME within the healthcare industry would use SAML for secure application portal access, but a mobile app would benefit from the efficiencies of OIDC. The next section provides a brief overview of which method of SSO is most optimal for each case.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Other Authentication Options<\/h2>\n\n\n\n<p><\/p>\n\n\n\n\n\n<h3 class=\"wp-block-heading\">SAML vs. OAuth<\/h3>\n\n\n\n<p>OAuth tends to be more application centric than SAML, which is primarily used for web SSO. OAuth would be the preferred choice in an instance where an app must scope access to devices\u2019 hardware functions, such as a webcam or camera.<\/p>\n\n\n\n<p>Click here for a detailed <a href=\"https:\/\/jumpcloud.com\/blog\/saml-oauth\">comparison between SAML and OAuth<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">SAML vs. OpenID Connect (OIDC)<\/h3>\n\n\n\n<p>OIDC is growing in popularity, especially among mobile developers. It provides scalable, efficient communications, but doesn\u2019t have the same ability to authorize users with services that SAML is built for. OAuth serves as its underpinnings, with an additional identity layer that\u2019s intended for decentralized identity. It\u2019s as much a philosophical stance as a technology one.&nbsp;<\/p>\n\n\n\n<p>Click here for a detailed <a href=\"https:\/\/jumpcloud.com\/blog\/saml-vs-openid\">comparison of SAML vs. OpenID<\/a>.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">SAML vs. LDAP<\/h3>\n\n\n\n<p>These two standards go hand in hand, with an LDAP directory serving as the user management role for an IdP. Combining these authentication protocols makes it possible to connect to an even wider variety of services, securely, to help meet your business objectives.&nbsp;<\/p>\n\n\n\n<p>Click here for a detailed comparison between <a href=\"https:\/\/jumpcloud.com\/blog\/difference-ldap-saml-sso\">SAML and LDAP<\/a>.<\/p>\n\n\n\n<p>The JumpCloud Directory Platform enables IT admins to manage their users and their access to systems, applications, networks, infrastructure, file servers, and more with just a single set of credentials. As a cloud IdP, JumpCloud has reimagined the partnership that exists between Active Directory and SSO for the modern era, providing practically all of the same capabilities and many others, all from a single cloud admin console.<\/p>\n\n\n\n<p>JumpCloud leverages SAML, along with LDAP, RADIUS, and more, to provide a True SSO experience, meaning IT organizations can use one comprehensive solution instead of a host of others. Beyond that, IT admins can also use JumpCloud to implement Zero Trust security policies, such as multi-factor authentication (MFA), conditional access, password complexity, and more across their organization at scale.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Using SAML with JumpCloud<\/h2>\n\n\n\n<p>True Single Sign-On\u2122 extends beyond simply SAML, using an array of other protocols and authentication methods to extend one set of user credentials to virtually all resources. Thankfully, JumpCloud&#8217;s next-generation cloud directory service provides a True SSO experience for modern IT organizations.<\/p>\n\n\n\n\n\n<p>This article outlines <a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/getting-started-applications-saml-sso2\" target=\"_blank\" rel=\"noreferrer noopener\">how to get started with SAML SSO<\/a> using JumpCloud. The easiest method is to search through our growing library of connectors, but it\u2019s also possible to write your own.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How to Configure SAML<\/h3>\n\n\n\n<p>To connect an application to JumpCloud:<\/p>\n\n\n\n<ol>\n<li>Log in to the JumpCloud Admin Portal at <a href=\"https:\/\/console.jumpcloud.com\/login\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/console.jumpcloud.com\/login<\/a>.<\/li>\n\n\n\n<li>Go to User Authentication &gt; SSO, then click ( + ). The Configure New Application panel appears.<\/li>\n\n\n\n<li>Search for an application by name using the search bar at the top of the panel.<\/li>\n\n\n\n<li>When you find the application you want to connect, click configure.&nbsp;<\/li>\n<\/ol>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"692\" height=\"355\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/06\/3.2.png\" alt=\"\" class=\"wp-image-63891\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/06\/3.2.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/06\/3.2-300x154.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><\/figure>\n\n\n\n<p>Tip: If there isn&#8217;t a connector for an application you want to connect to JumpCloud, you can use the <a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/single-sign-on-sso-with-saml-20-connector1\" target=\"_blank\" rel=\"noreferrer noopener\">SAML 2.0 connector<\/a> to connect that app with JumpCloud.&nbsp;<\/p>\n\n\n\n<p>JumpCloud uses the SAML 2.0 protocol as its method to assert identities with application service providers. JumpCloud is considered the identity provider, and the application is considered the service provider.<\/p>\n\n\n\n<h3 class=\"wp-block-heading\">How to Manage SAML Authentication<\/h3>\n\n\n\n<p>The service provider typically provides SAML configuration parameters to set up SSO from a compatible IdP like JumpCloud.&nbsp;<\/p>\n\n\n\n<p>The following image shows <a href=\"https:\/\/help.salesforce.com\/articleView?id=mc_overview_single_sign_on_authentication_via_saml_2.htm&amp;type=5\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Salesforce&#8217;s instructions<\/a> for setting up the Marketing Cloud for SAML SSO.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"692\" height=\"470\" src=\"https:\/\/jumpcloud.com\/\/wp-content\/uploads\/2022\/06\/4.2.png\" alt=\"\" class=\"wp-image-63892\" srcset=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/06\/4.2.png 692w, https:\/\/jumpcloud.com\/wp-content\/uploads\/2022\/06\/4.2-300x204.png 300w\" sizes=\"(max-width: 692px) 100vw, 692px\" \/><\/figure>\n\n\n\n<h3 class=\"wp-block-heading\">How to Manage SAML Assertion<\/h3>\n\n\n\n<p>To log in to a web-based application using IdP initiated SAML authentication:&nbsp;<\/p>\n\n\n\n<ol>\n<li>A user enters their credentials in the IdP.&nbsp;<\/li>\n\n\n\n<li>The IdP authenticates and authorizes the user.<\/li>\n\n\n\n<li>After logging in, the user navigates to a list of web-based applications they can access, and selects the one they want to use.&nbsp;<\/li>\n\n\n\n<li>When the user clicks on the web-based application, the IdP sends a SAML assertion to the SP.<\/li>\n\n\n\n<li>The SP receives the SAML assertion and does a few things:<\/li>\n<\/ol>\n\n\n\n<ul>\n<li>The SP checks to make sure the assertion is valid and authentic.<\/li>\n\n\n\n<li>The SP finds out who the user is and how they should be logged in.&nbsp;<\/li>\n<\/ul>\n\n\n\n<ol start=\"6\">\n<li>The SP gives the user access to the application without requiring them to log in again.&nbsp;<\/li>\n<\/ol>\n\n\n\n<p>\u200b\u200b\u200b\u200bTo log in to a web-based application using SP initiated SAML authentication:<\/p>\n\n\n\n<ol>\n<li>A user navigates to a web-based application\u2019s login page and enters their username.&nbsp;<\/li>\n\n\n\n<li>The SP behavior varies, but many detect that SAML SSO is involved, and redirects the user to an IdP login page.&nbsp;<\/li>\n\n\n\n<li>The user enters their credentials on the IdP login page.&nbsp;<\/li>\n\n\n\n<li>The IdP authenticates and authorizes the user, then sends a SAML assertion back to the SP with the information it needs.&nbsp;<\/li>\n\n\n\n<li>The user is redirected back to the SP with access to the application.&nbsp;<\/li>\n<\/ol>\n\n\n\n<p>Read JumpCloud\u2019s <a href=\"https:\/\/support.jumpcloud.com\/support\/s\/article\/SAML-Attribute-Notes\" target=\"_blank\" rel=\"noreferrer noopener\">SAML attributes notes<\/a>.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Get Started with JumpCloud<\/h2>\n\n\n\n<p>You can experience True SSO with SAML, LDAP, RADIUS, and more yourself, with <a href=\"https:\/\/console.jumpcloud.com\/signup\" target=\"_blank\" rel=\"noreferrer noopener\">JumpCloud<\/a>. <\/p>\n\n\n\n<p>Want to dip a toe in before jumping right in? We also offer <a href=\"https:\/\/jumpcloud.com\/demo\/\">free, personalized demos<\/a> of the platform to show you the ropes before you try JumpCloud for yourself. Please <a href=\"https:\/\/jumpcloud.com\/contact\/\">contact us<\/a> if you would like to learn more.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Before SAML, people had far too many passwords to remember. They had one for each web application they used, which for some people was in the hundreds.<\/p>\n","protected":false},"author":150,"featured_media":34042,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_oasis_is_in_workflow":0,"_oasis_original":0,"_oasis_task_priority":"","inline_featured_image":false,"footnotes":""},"categories":[2337],"tags":[],"collection":[2780],"platform":[],"funnel_stage":[3016],"coauthors":[2535],"acf":[],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v22.9 (Yoast SEO v22.9) - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>What is SAML (Security Assertion Markup Language)? - JumpCloud<\/title>\n<meta name=\"description\" content=\"Learn more about SAML and how it simplifies password management so users don&#039;t have to create or remember countless different passwords.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/jumpcloud.com\/blog\/what-is-saml\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"What is SAML (Security Assertion Markup Language)?\" \/>\n<meta property=\"og:description\" content=\"Learn more about SAML and how it simplifies password management so users don&#039;t have to create or remember countless different passwords.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/jumpcloud.com\/blog\/what-is-saml\" \/>\n<meta property=\"og:site_name\" content=\"JumpCloud\" \/>\n<meta property=\"article:published_time\" content=\"2022-03-01T18:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-02-05T14:54:11+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"730\" \/>\n\t<meta property=\"og:image:height\" content=\"487\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"David Worthington\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"David Worthington\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"11 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml#article\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml\"},\"author\":{\"name\":\"David Worthington\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\"},\"headline\":\"What is SAML (Security Assertion Markup Language)?\",\"datePublished\":\"2022-03-01T18:00:00+00:00\",\"dateModified\":\"2024-02-05T14:54:11+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml\"},\"wordCount\":2232,\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg\",\"articleSection\":[\"Remote Work\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml\",\"url\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml\",\"name\":\"What is SAML (Security Assertion Markup Language)? - JumpCloud\",\"isPartOf\":{\"@id\":\"https:\/\/jumpcloud.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml#primaryimage\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml#primaryimage\"},\"thumbnailUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg\",\"datePublished\":\"2022-03-01T18:00:00+00:00\",\"dateModified\":\"2024-02-05T14:54:11+00:00\",\"description\":\"Learn more about SAML and how it simplifies password management so users don't have to create or remember countless different passwords.\",\"breadcrumb\":{\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/jumpcloud.com\/blog\/what-is-saml\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml#primaryimage\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg\",\"width\":730,\"height\":487},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/jumpcloud.com\/blog\/what-is-saml#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/jumpcloud.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"What is SAML (Security Assertion Markup Language)?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/jumpcloud.com\/#website\",\"url\":\"https:\/\/jumpcloud.com\/\",\"name\":\"JumpCloud\",\"description\":\"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.\",\"publisher\":{\"@id\":\"https:\/\/jumpcloud.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/jumpcloud.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/jumpcloud.com\/#organization\",\"name\":\"JumpCloud\",\"url\":\"https:\/\/jumpcloud.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"contentUrl\":\"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png\",\"width\":598,\"height\":101,\"caption\":\"JumpCloud\"},\"image\":{\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e\",\"name\":\"David Worthington\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g\",\"caption\":\"David Worthington\"},\"description\":\"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.\",\"sameAs\":[\"https:\/\/jumpcloud.com\/blog\",\"david.worthington@jumpcloud.com\"]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"What is SAML (Security Assertion Markup Language)? - JumpCloud","description":"Learn more about SAML and how it simplifies password management so users don't have to create or remember countless different passwords.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/jumpcloud.com\/blog\/what-is-saml","og_locale":"en_US","og_type":"article","og_title":"What is SAML (Security Assertion Markup Language)?","og_description":"Learn more about SAML and how it simplifies password management so users don't have to create or remember countless different passwords.","og_url":"https:\/\/jumpcloud.com\/blog\/what-is-saml","og_site_name":"JumpCloud","article_published_time":"2022-03-01T18:00:00+00:00","article_modified_time":"2024-02-05T14:54:11+00:00","og_image":[{"width":730,"height":487,"url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg","type":"image\/jpeg"}],"author":"David Worthington","twitter_card":"summary_large_image","twitter_misc":{"Written by":"David Worthington","Est. reading time":"11 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml#article","isPartOf":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml"},"author":{"name":"David Worthington","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e"},"headline":"What is SAML (Security Assertion Markup Language)?","datePublished":"2022-03-01T18:00:00+00:00","dateModified":"2024-02-05T14:54:11+00:00","mainEntityOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml"},"wordCount":2232,"publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg","articleSection":["Remote Work"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml","url":"https:\/\/jumpcloud.com\/blog\/what-is-saml","name":"What is SAML (Security Assertion Markup Language)? - JumpCloud","isPartOf":{"@id":"https:\/\/jumpcloud.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml#primaryimage"},"image":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml#primaryimage"},"thumbnailUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg","datePublished":"2022-03-01T18:00:00+00:00","dateModified":"2024-02-05T14:54:11+00:00","description":"Learn more about SAML and how it simplifies password management so users don't have to create or remember countless different passwords.","breadcrumb":{"@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/jumpcloud.com\/blog\/what-is-saml"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml#primaryimage","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2019\/08\/saml-what.jpg","width":730,"height":487},{"@type":"BreadcrumbList","@id":"https:\/\/jumpcloud.com\/blog\/what-is-saml#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/jumpcloud.com\/"},{"@type":"ListItem","position":2,"name":"What is SAML (Security Assertion Markup Language)?"}]},{"@type":"WebSite","@id":"https:\/\/jumpcloud.com\/#website","url":"https:\/\/jumpcloud.com\/","name":"JumpCloud","description":"Daily insights on directory services, IAM, LDAP, identity security, SSO, system management (Mac, Windows, Linux), networking, and the cloud.","publisher":{"@id":"https:\/\/jumpcloud.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/jumpcloud.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/jumpcloud.com\/#organization","name":"JumpCloud","url":"https:\/\/jumpcloud.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/","url":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","contentUrl":"https:\/\/jumpcloud.com\/wp-content\/uploads\/2021\/01\/jc-logo-brand-2021.png","width":598,"height":101,"caption":"JumpCloud"},"image":{"@id":"https:\/\/jumpcloud.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/185ca12034835ee50ee17b100abdfb2e","name":"David Worthington","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/jumpcloud.com\/#\/schema\/person\/image\/d9acf1381c6e5b50c0f50d47b7b05411","url":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a6dde901b469c9005c22973e42038d62?s=96&d=mm&r=g","caption":"David Worthington"},"description":"I'm the JumpCloud Champion for Product, Security. JumpCloud and Microsoft certified, security analyst, a one-time tech journalist, and former IT director.","sameAs":["https:\/\/jumpcloud.com\/blog","david.worthington@jumpcloud.com"]}]}},"_links":{"self":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/34040"}],"collection":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/users\/150"}],"replies":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/comments?post=34040"}],"version-history":[{"count":2,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/34040\/revisions"}],"predecessor-version":[{"id":105124,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/posts\/34040\/revisions\/105124"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media\/34042"}],"wp:attachment":[{"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/media?parent=34040"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/categories?post=34040"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/tags?post=34040"},{"taxonomy":"collection","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/collection?post=34040"},{"taxonomy":"platform","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/platform?post=34040"},{"taxonomy":"funnel_stage","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/funnel_stage?post=34040"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/jumpcloud.com\/wp-json\/wp\/v2\/coauthors?post=34040"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}