Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

SAML: A Technical Primer

ssoready.com

Post reply on HN
Print view View original

1–10 of 100 posts

Re: SAML: A Technical Primer

#3

Post by politelemon »

pmontra wrote: post #2

Surprisingly the page doesn't explain the meaning of SAML. It's Security Assertion Markup Language https://en.wikipedia.org/wiki/Security_Assertion_Markup_Lang...

Thanks, I had wondered about that, though I was certain that the S didn't mean simple.

Re: SAML: A Technical Primer

#4

Post by nocman »

pmontra wrote: post #2

Surprisingly the page doesn't explain the meaning of SAML. It's Security Assertion Markup Language https://en.wikipedia.org/wiki/Security_Assertion_Markup_Lang...

Oh, I thought it stood for:

"Suffering A Massive Lot" - jk

Let's just say my interaction with managing websites that used SAML was less than pleasant.

Re: SAML: A Technical Primer

#5

Post by thrwaway1985882 »

nocman wrote: post #4
pmontra wrote: post #2

Surprisingly the page doesn't explain the meaning of SAML. It's Security Assertion Markup Language https://en.wikipedia.org/wiki/Security_Assertion_Markup_Lang...

Oh, I thought it stood for: "Suffering A Massive Lot" - jk Let's just say my interaction with managing websites that used SAML was less than pleasant.

> Let's just say my interaction with managing websites that used SAML was less than pleasant.

My interactions supporting it as both the identity provider & the service provider have lead to me being the SAML person at work, and I'm now very used to people either laughing at my misfortune or giving me pitiful looks.

It combines all the wonderful antipatterns you can name: a protocol where near everything is optional and two standards-compliant implementations can refuse to cooperate in any number of ways, hair raising security decisions (XML-DSIG?! configurable crypto? ughh), and half-baked features (back-channel SLO, anyone?)

It's a Lovecraftian horror that actually makes me appreciate JWTs.

Re: SAML: A Technical Primer

#6

Post by Terretta »

pmontra wrote: post #2

Surprisingly the page doesn't explain the meaning of SAML. It's Security Assertion Markup Language https://en.wikipedia.org/wiki/Security_Assertion_Markup_Lang...

(S)uggest (A)lternative (M)odern (L)ogin: OIDC/Oauth2 ?

The "Continue with" buttons that include Microsoft, Google, and Apple, tend to pick up most SMBs without SAML SSO headaches on either side.

Like so:

https://www.xsplit.com/user/auth

https://id.atlassian.com/login

Use an email domain restriction, and you have by and large SSO; the user can only log into your SaaS if the user is an active account at that company.

Storing user passwords yourself is a liability, indirect or direct: https://www.reuters.com/technology/eu-privacy-regulator-fine...

Re: SAML: A Technical Primer

#9

Post by mirekrusin »

politelemon wrote: post #3
pmontra wrote: post #2

Surprisingly the page doesn't explain the meaning of SAML. It's Security Assertion Markup Language https://en.wikipedia.org/wiki/Security_Assertion_Markup_Lang...

Thanks, I had wondered about that, though I was certain that the S didn't mean simple.

Everybody who worked with it knows that S stands for Shitty.

Re: SAML: A Technical Primer

#10

Post by 1270018080 »

Since we're here, I hope someone creates another all encompassing SP/IDP emulator like samltest.id used to until the owner stopped paying. That made my life so much easier as a developer when SAML stuff came up. No one else has come close.
Post reply on HN