The SAML web site is not longer accepting new posts. Information on this page is preserved for legacy purposes only. For current information on SAML, please see the OASIS Security Services Technical Committee Wiki.

Welcome to SAML

This is the official community gathering place and information resource for the SAML OASIS Standard. SAML provides an XML-based framework for creating and exchanging security information between online partners. This is a community-driven site, and the public is encouraged to contribute content.

SecureAuth wins Info Security Products Guide awards

SecureAuth Corporation announced today that Info Security Products Guide has named SecureAuth IEP a winner of the 2011 Tomorrow's Technology Today Award in two categories. The SecureAuth Identity Enforcement Platform (IEP) was selected based on technologies that are making the most positive impact on security in today's highly sophisticated and blended attacks environment.

Read more

PhoneFactor supporting SAML 2.0

PhoneFactor announced support for SAML 2.0, a standard for communicating identity information in the cloud. By providing support for SAML, PhoneFactor enables federated two-factor authentication for Google Apps,, and other cloud services and platforms.

Read more

authnrequest invalid signature

i receive a 'invalid signature' from the IDP (</samlp:StatusCode>), what causes this message to appear? what part of the authnrequest should be signed? and how does the idp validate it? i dont understand how it is possible that the element with the signature is within the element that needs to be signed (root?) (if that is the case)

Kantara Initiative SAML 2.0 Interop Test Dates Adjusted - Registration Extended

Kantara Initiative - SAML 2.0 Interoperability Test

Test Plan ver3.3

Read more

How to find encryption details of SP initiated message?


 How do I find whether the SP initiated SAML messages in a setup are signed by RSA-SHA-1 digital signature algorithm (with 2048 bit strength ) or not?


Santosh Focus Areas: BPEL | DITA | ebXML | IDtrust | OpenDocument | SAML | UBL | UDDI
OASIS sites: OASIS | Cover Pages | | AMQP | CGM Open | eGov | Emergency | IDtrust | LegalXML | Open CSA | OSLC | WS-I