SAML Security
The SAML specifications recommend, and in some cases mandate, a variety of security mechanisms:
- SSL 3.0 or TLS 1.0 for transport-level security
- XML Signature and XML Encryption for message-level security
Requirements are often phrased in terms of (mutual) authentication, integrity, and confidentiality, leaving the choice of security mechanism to implementers and deployers.
Read more about this topic: Security Assertion Markup Language
Famous quotes containing the word security:
“If we could have any security against moods! If the profoundest prophet could be holden to his words, and the hearer who is ready to sell all and join the crusade, could have any certificate that to-morrow his prophet shall not unsay his testimony!”
—Ralph Waldo Emerson (1803–1882)