Skip Links

Network World

  • Social Web 
  • Email 
  • Close
Send to a friend Feedback

A logical view of SAML 1.x

Network World , 03/22/2004

< Back to Our federated ID future

The Security Assertion Markup Language (SAML) provides a standardized way of passing sign-on and authorization information - via messages called "assertions" - between two federated domains. One domain is the source site authenticating browser-based users and the other is the destination site controlling access to the requested resource.

Functional entities typically found at the source site are:

The principal - The functional entity (often a browser-based client, but it could be a Web service or application) that requests a resource.

Authentication authority - Responsible for ensuring a principal is what it says it is. The authentication authority passes credentials input by the principal to an authenticating service (such as a Lightweight Directory Access Protocol directory or RADIUS server). It then determines if the authentication was successful, and, if so, issues an authentication assertion message vouching for that.

Attribute authority - Responsible for determining what rights the principal has regarding the requested resource. It processes the authentication assertion message, retrieving the principal's attribute information from a repository (such as a LDAP directory or database) and issuing an assertion message vouching that the principal is entitled to the attributes.

Functional entities typically found at the destination site are:

Policy decision point -This functional entity processes authentication and attribute assertion messages, and evaluates those assertions against policies that are maintained in a repository. It issues authorization decision assertion messages that validate authentications and attributes.

Policy enforcement point - An entity that processes authorization decision assertions and enforces policies. At times, the policy enforcement point can be hosted on an external node.

Resource - An instance of information, services or applications requested by and delivered to principals online, subject to authentication and authorization controls. At times, the resource can be hosted on an external node.

Partner Content

Brilliantly simple security and control solutions for email, web and endpoint

www.sophos.com

Stopping data leakage

Learn how to exploit your current security investment to control the information that flows into, through and out of your network.

Download the white paper.

Why detection rates aren't enough

Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.

Download the white paper.

Applications: taking back control

Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.

Learn more today.

Comment
Login
Forgot your account info?
Add comment
Anonymous comments subject to approval. Register here for member benefits.
Have a NetworkWorld account? Log in here. Register now for a free account.

Videos

rssRss Feed

Whitepapers

Magic Quadrant for Application Delivery Controllers

Gartner summarizes its view on Application Delivery Controllers, evaluates strengths and weaknesses...

Vulnerability Management For Dummies

Download this concise book "Vulnerability Management for Dummies," to learn about the simple steps...

The ROI and TCO Benefits of Data Deduplication for Data Protection in the Enterprise

This paper examines and quantifies the costs and benefits of backup with deduplication storage as...

Webcasts

Transforming the Enterprise WAN Edge: Video from Cisco

Life on the edge of your WAN has changed dramatically. With the need to deliver advanced services,...

PoE Plus: Impact on the PoE Market

The standard for Power over Ethernet (PoE), IEEE Std. 802.3af(tm)-2003, advanced networking,...

Harnessing the power of communications to increase workplace performance

Due to the convergence of IT and telecommunications technologies, the business workplace has been...

Special Reports

The Evolution of Network Security

We have so many holes punched in our firewalls today that many industry insiders question the value...

The self-managed network

We aren't there yet, but advances in network and systems management tools are making it possible to...

Get instant email notification when white papers, webcasts, executive guides are added to our library. Stay informed and up-to-date with the latest on IT Technologies with Network World's Resource Alerts.