What is the difference between SSO and SAML?

Identity & Access Management (IAM)
3.4k viewscircle icon1 Upvotecircle icon26 Comments
Sort by:
Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SSO is an authentication scheme often accomplished by LDAP and SAML is a XML-based markup language for security assertion in the form of a token.

Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SAML is a a XML-based markup language for security assertion and SSO is an authentication scheme that allows user to login using LDAP in most cases,

Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SAML  is an XML-based markup language for security assertions. Single sign-on is an authentication scheme that allows a user to log in by using LDAP databases on servers.

Lightbulb on1
Senior Enterprise Architect, Application Consulting in Healthcare and Biotech5 years ago

There are already some very good answers here.  One point I didn't see made is that while you cannot "buy" SAML, you can buy a SSO solution based on the SAML standard.

Director of IT in Education5 years ago

SAML has more (program capable) features between the service provider and the identity provider.

Content you might like

Are you confident in your organization's access control for LLM plugins?

Yes65%

No29%

Not sure4%

View Results

If you’ve implemented zero trust identity and access management, what tools have been most effective at enforcing strict access controls?

Read More Comments

Can you share any tips or lessons learned from your IAM implementation? What would you do differently, if anything?

Read More Comments

Are you planning to improve endpoint security in the next 12 months with any of these additional capabilities?

Patch management: to reduce attack surface and avoid system misconfigurations34%

Malware and ransomware prevention: to protect endpoints from social engineering attacks60%

Malware and fileless malware detection and response: to protect against malicious software47%

Threat Hunting: to detect unknown threats that are acting or dormant in your environment and have bypassed the security controls29%

Not planning to change endpoint security strategy7%

View Results

Do you have any tips to boost the SOC/security operations team’s visibility into IAM? Have you managed to effectively close that gap at your organization?