SAML is defined in terms of assertions, protocols, bindings, and profiles.

SAML defines a number of request/response protocols. These protocols allow service providers to:

• request or query for an assertion
• ask for a subject to be authenticated
• create and manage name identifier mappings (for federating identities through account linking)
• request a near-simultaneous logout of a collection of related sessions ("single logout")