What is the difference between SSO and SAML?

Identity & Access Management (IAM)
3.4k viewscircle icon1 Upvotecircle icon26 Comments
Sort by:
Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SSO is an authentication scheme often accomplished by LDAP and SAML is a XML-based markup language for security assertion in the form of a token.

Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SAML is a a XML-based markup language for security assertion and SSO is an authentication scheme that allows user to login using LDAP in most cases,

Director of IT for HR Systems at Delta Air Lines in Transportation5 years ago

SAML  is an XML-based markup language for security assertions. Single sign-on is an authentication scheme that allows a user to log in by using LDAP databases on servers.

Lightbulb on1
Senior Enterprise Architect, Application Consulting in Healthcare and Biotech5 years ago

There are already some very good answers here.  One point I didn't see made is that while you cannot "buy" SAML, you can buy a SSO solution based on the SAML standard.

Director of IT in Education5 years ago

SAML has more (program capable) features between the service provider and the identity provider.

Content you might like

Is the edge of your enterprise secure?

Yes75%

No10%

Working on it13%

View Results

Have you considered implementing passwordless authentication flows?

Yes, we currently provide passwordless authentication31%

No, but we plan to implement passwordless in 202137%

No, but we plan to implement passwordless in the long-term23%

No, and we don't plan to implement passwordless8%

View Results

If you’ve implemented zero trust identity and access management, what tools have been most effective at enforcing strict access controls?

Read More Comments

Can you share any tips or lessons learned from your IAM implementation? What would you do differently, if anything?

Read More Comments

Do you have any tips to boost the SOC/security operations team’s visibility into IAM? Have you managed to effectively close that gap at your organization?