What is SAML?

SAML is the Security Assertion Markup Language.

SAML is a derivative of XML which is designed for the exchange of authentication and authorization data.

The purpose of SAML is to enable Single Sign-On for web applications.

SAML utilizes TLS to ensure the confidentiality of authentication and authorization data during transit.

SAML Standards

SAML is defined by the Organization for the Advancement of Structured Information Standards (OASIS).

saml-conformance-2.0-os	Conformance Requirements
saml-core-2.0-os	Assertions and Protocols
saml-bindings-2.0-os	Bindings
saml-profiles-2.0-os	Profiles
saml-metadata-2.0-os	Metadata
saml-authn-context-2.0-os	Authentication Context
saml-sec-consider-2.0-os	Security and Privacy Considerations
saml-glossary-2.0-os	SAML Glossary

WS-Security is a SOAP-based protocol for sharing authentication and authorization information.

WS-Security was developed developed by IBM, Microsoft, and Verisign.

The WS-Security standard has now been transferred to OASIS for further development.

Our friends at Qualys are offering free copies of the electronic version of Vulnerability Management for Dummies to Tech-FAQ readers.

Vulnerability Management for Dummies:

Explains the critical need for vulnerability management
Details the essential best-practice steps of a successful vulnerability management program
Outlines the various vulnerability management solutions - including the advantages and disadvantages of each
Highlights the award-winning QualysGuard vulnerability management solution
Provides a ten point checklist for removing vulnerabilities from your key resources