What is the difference between SSO and SAML?

Identity & Access Management (IAM)
3.4k viewscircle icon1 Upvotecircle icon26 Comments
Sort by:
Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SSO is an authentication scheme often accomplished by LDAP and SAML is a XML-based markup language for security assertion in the form of a token.

Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SAML is a a XML-based markup language for security assertion and SSO is an authentication scheme that allows user to login using LDAP in most cases,

Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SAML  is an XML-based markup language for security assertions. Single sign-on is an authentication scheme that allows a user to log in by using LDAP databases on servers.

Lightbulb on1
Senior Enterprise Architect, Application Consulting in Healthcare and Biotech5 years ago

There are already some very good answers here.  One point I didn't see made is that while you cannot "buy" SAML, you can buy a SSO solution based on the SAML standard.

Director of IT in Education5 years ago

SAML has more (program capable) features between the service provider and the identity provider.

Content you might like

Which of these leading security practices do you plan to focus on the most in 2022?

Proactively updating technology20%

Integrating security technology41%

Accelerating incident response17%

Improving the accuracy of threat detection8%

Ensuring prompt disaster recovery12%

Other; comment below

View Results

Can anyone share how they have partnered with HR to prevent shadow agents from accessing HR data outside of sanctioned AI platforms/tools?

As web operations move toward edge computing frameworks and processes, do you feel prepared to sufficiently observe and protect user privacy at the edge?

We haven't thought much about it.7%

We don't feel it is our responsibility to protect user data at the edge.28%

We feel reasonably well prepared.29%

We have all the tools we need to see and control user data at the edge of our web systems in accordance with our privacy policy and international privacy regulations.30%

We can't see or control any user data between our users and the edge of our systems.1%

I don't know.1%

View Results

If you’ve implemented zero trust identity and access management, what tools have been most effective at enforcing strict access controls?

Read More Comments

Can you share any tips or lessons learned from your IAM implementation? What would you do differently, if anything?

Read More Comments