Programming/IAM
Identity and Access Management
| Authentication | Authorization |
|---|---|
| credential validation | permission scope validation |
Acronyms
- IdP
- identity provider
- JWT
- JSON web token
- RP
- relaying party, usually used with OIDC and OAuth
- SP
- service provider, usually used with SAML
- XML
- extensible markup language
Single Sign-On Authentication
| Protocol | Description | Format | Token Terminology |
|---|---|---|---|
| SAML | Security Assertion Markup Language | XML | assertion |
| OIDC | OpenID Connect, built on OAuth 2.0 authorization protocol | JWT | claim |
| WS-Fed | WS-Federation, part of the WS-* framework, similar to SAML but not compatible | XML | assertion |