How SAML Works

SAML SSO operates by passing the identity of the user from one location (the identity provider) to another (the service provider). It is achieved by the exchange of XML documents that are digitally signed.

SAML Initial Setup

• It is an XML document containing the information required for SAML-enabled identity or service provider interaction. This document includes e.g., Endpoint URLs, Supported Bindings information, IDs, and Public Keys.

• The metadata from the service provider includes keys, services, and URLs that describe the Restyaboard SAML endpoints.

• It is the name identifier that is included in the metadata. Identity Provider names like ADFS, Simple SAML, Salesforce.

For step-by-step instructions on SAML / Shibboleth Plugin Configuration, refer YouTube video

• It is the unique identifier of the Identity Provider or Issuer.

• Single Sign On Service URL of your Identity Provider.

• Single Logout Service URL of your Identity Provider.

• The X.509 certificates are the Identity Provider certificates that a SAML configuration uses.

• SAML signing certificates ensure that messages are coming from the expected identity and service providers. The SAML certificate is used to sign SAML requests, responses, and assertions from the service to relying applications, such as WebEx or Google Apps.

• SAML encryption certificates ensure that messages are coming from the expected identity and service providers with authenticity and confidentiality.

For step-by-step instructions on Login with SSOCircle.com, using SAML / Shibboleth Plugin, refer YouTube video