SAML 1.1

<a href="/facts/Security_Assertion_Markup_Language/HbCY4ge6">Security Assertion Markup Language</a> (SAML) is an <a href="/facts/XML/clNgUfWk">XML</a> standard for exchanging <a href="/facts/Authentication/64y4S69b">authentication</a> and <a href="/facts/Authorization/FYFAkCH2">authorization</a> data between security domains. SAML is a product of the <a href="/facts/OASIS_(organization)/a2r8y7tX">OASIS (organization)</a> <a href="http://www.oasis-open.org/committees/tc_home.php?wg_abbrev=security">Security Services Technical Committee</a>.
SAML 1.1 was ratified as an OASIS standard in September 2003. The critical aspects of SAML 1.1 are covered in detail in the official documents SAMLCore and SAMLBind. If you are new to SAML, you should probably read the introductory <a href="/facts/Security_Assertion_Markup_Language/HbCY4ge6">SAML</a> topic first, and then the SAMLOverview document from OASIS.
Prior to SAML 1.1, SAML 1.0 was adopted as an OASIS standard in November 2002. SAML has undergone one minor (V1.1) and one major revision (V2.0) since V1.0, which itself is a relatively simple protocol. SAML 1.0 is of more than historical interest, however, since the US Federal <a href="https://web.archive.org/web/20081210081853/http://www.cio.gov/eauthentication/">E-Authentication Initiative</a> has adopted SAML 1.0 as its core technology.
Versions 1.0 and 1.1 of SAML are similar. See SAMLDiff for specific differences between the two standards. This article concentrates on SAML 1.1 since it is an important standard upon which many other standards and implementations depend.
Warning: Implementers and deployers should note well that all code examples in this article are non-normative and for illustration purposes only. Consult the <a href="http://saml.xml.org/saml-specifications">OASIS SAML specifications</a> for normative requirements.

SAML 1.1 open-in-new

SAML 1.1