SAML

What is SAML?

SAML (Security Assertion Markup Language) is an open standard for exchanging authentication and authorization data. The version in common use today, SAML 2.0, dates from 2005 and is maintained by OASIS.

SAML has two roles:

• Identity provider (IdP): the system that knows people and checks their sign-in, for example Microsoft Entra ID, Okta or an in-house directory.
• Service provider (SP): the application a person wants to use.

When someone signs in, the application redirects them to the IdP. The IdP checks the person and sends back a signed statement (an assertion), often with attributes such as email address or groups. The application trusts that signature and lets the person in.

SAML is most common in larger organizations that run a central identity provider and want every application connected to it. Newer applications often also support OpenID Connect, which builds on OAuth 2.0.

SAML at Openbase.one

SAML is available on the Enterprise plan. On every other plan you sign in with Google Workspace, Microsoft Entra ID, a passwordless email code or a password; admins can switch passwords off. If your company requires its own SAML identity provider, talk to us about the Enterprise plan.