7 min read
IAM Chapter 4: SAML 2.0 & SSO
The signed statement behind SSO, opened up: SP-initiated vs IdP-initiated flows, why SAML assertions resist replay, why certificate expiry is the most common SAML outage, and where the standard starts to break.