SAML

Full Title or Meme

Security Assertion Markup Language is a collection of standards used in Identifier Management

Problems

There are two terms that SAML defined that defy logical analysis but have propagated misunderstanding to this day.

• Identity - the use in SAML lead to a conflation of the idea of a digital Identifier with a person's identity which it is surely is not.
• Claim - as defined in SAML the term is not problematic, but is use in Microsoft implementations has lead it to be conflated with Attribute.

Vulernabilities

• The "Golden SAML" is caused by the creation of an Identifier token that allowed access across multiple applications.