Security Assertion Markup Language (SAML)
SAML Overview
Security Assertion Markup Language (SAML) is a mechanism used for communicating identities between two web applications. It enables a web-based Single sign-on (SSO) and hence, it eliminates the need for maintaining credentials for various applications and reduces identity theft.
SAML integration requires the following parameters:
- IDP – Identity Provider (Okta, OneLogin, PingIdentity, and OpenSSO)
- SP – Service Provider (any application which supports SAML 2.0), AppViewX in this case
- User – Access the application.
Basic SAML Flow
A user requests a SAML SSO to access a resource protected by a service provider. The
service provider requests the identity provider to authenticate and authorize the
user. The identity provider checks the existence of the user and sends back an
assertion to the service provider that may or may not include the user information.
The communication passes through the HTTP/HTTPS.

