What is the difference between SSO and SAML?

Identity & Access Management (IAM)
3.4k viewscircle icon1 Upvotecircle icon26 Comments
Sort by:
Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SSO is an authentication scheme often accomplished by LDAP and SAML is a XML-based markup language for security assertion in the form of a token.

Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SAML is a a XML-based markup language for security assertion and SSO is an authentication scheme that allows user to login using LDAP in most cases,

Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SAML  is an XML-based markup language for security assertions. Single sign-on is an authentication scheme that allows a user to log in by using LDAP databases on servers.

Lightbulb on1
Senior Enterprise Architect, Application Consulting in Healthcare and Biotech5 years ago

There are already some very good answers here.  One point I didn't see made is that while you cannot "buy" SAML, you can buy a SSO solution based on the SAML standard.

Director of IT in Education5 years ago

SAML has more (program capable) features between the service provider and the identity provider.

Content you might like

How do you monitor and restrict the types of visitor behavior information and PII 3rd-parties can discern, record, or extract via scripts and applications on your website?

We don't use any 3rd-party scripts16%

We can't monitor or restrict 3rd-party script behavior on our website31%

We trust vendors based on initial reviews22%

We test scripts periodically18%

We use Web Privacy Management, WebAppSec, or PriSec Software8%

We outsource website privacy and app security monitoring services2%

Other (please describe)

View Results

Can anyone share how they have partnered with HR to prevent shadow agents from accessing HR data outside of sanctioned AI platforms/tools?

If you’ve implemented zero trust identity and access management, what tools have been most effective at enforcing strict access controls?

Read More Comments

Can you share any tips or lessons learned from your IAM implementation? What would you do differently, if anything?

Read More Comments

What are the areas that your organization prioritizes for digital risk protection to help defend against cyber threats? (check all that apply.)

Attack Surface Management37%

Account Takeovers63%

Executive Protection49%

Hacktivism/Disinformation29%

Brand Abuse/Impersonations18%

Phishing Attacks29%

View Results