SAML 2.0
Ever wondered whenever you log into your work laptop and launch Slack or even Zoom you are automatically signed? Well that's SAML, it's mostly used for enterprise environments for single sign on (SSL). It uses XML as it's format.
The process:¶
- Request: You try to access Salesforce. Salesforce sees you aren't logged in.
- Redirect: Salesforce generates a SAML Request (an XML file) and redirects your browser to your Company's Login Page (the IdP, eg. Active Directory).
- Authentication: You enter your username/password on your Company Page.
- The Assertion: The Company Server verifies you and creates a SAML Assertion (a XML document sent from an Identity Provider (IdP) to a Service Provider (SP) that contains user authentication, attribute, or authorization information.
- The Hand-off: Your browser POSTs (uploads) this XML document back to Salesforce.
- Login: Salesforce reads the XML, checks the digital signature, and logs you in.
