What is SAML Assertion?

[Bumner]

In layman's terms please?

[MrsGoof]

have you ever heard of Google or wiki?

ffs

[Bumner]

have you ever heard of Google or wiki?

ffs

....and so much for the art of communication... so much for helping a colleague.... my problem - too lazy! cheers......

[MrsGoof]

....and so much for the art of communication... so much for helping a colleague.... my problem - too lazy! cheers......

np any time

OK back to sleep now.

[OrangeHopper]

Should see the trantrum he throws when I ask him a question.

[ratewhore]

What is a SAML token? This...

<saml:Assertion…>
<saml:Conditions…/>
<saml:AuthorizationStatement
Decision=“Permit”
Resource=“http://server.domain1.com/index.htm”>
<saml:Subject>
<saml:NameIdentifier
SecurityDomain=“domain2.com”
Name=“user”/>
</saml:Subject>
</saml:AuthorizationStatement>
</saml:Assertion>


This says the user "user" authenticated in security domain "domain2.com" is authorised to access the file "http://server.domain1.com/index.htm". Typically this is a response from a PDP (policy decision point) to a PEP (policy enforcement point). This is an authorisation assertion.

You can also have an authentication assertion stating 'User1' was authenticated to security domain 'dom1' by, say, a digital certificate at time 'x' valid for period 'y'. And also an attribute assertion saying 'User1' has, say, an attribute 'credit limit' with a value of '$5000'.

Of course, there is a previously agreed and configured trust relationship behind the scenes.

HTH...

[Bumner]

Thanks peeps.... I have a problem here whereby SAML Assertion cannot be used as the browser is locked down (doh).... however, users could apparently "supply a SAML as and when required for particular times"... just wondered how, if this is security stipulated across identity and service domain providers, this could be supplied as and when..... accordingly, I am now told that the SAML Assertion code is verbally provided

Had a white noise moment... sorry and thanks again....

cheers again.....