3 ms·
New apps should NOT implement SAML. All platforms support OpenID Connect. It's better in every way. SAML is effectivly dead from a development standpoint. All
by youdontknowtho 7y ago
New apps should NOT implement SAML.
All platforms support OpenID Connect. It's better in every way. SAML is effectivly dead from a development standpoint. All the energy from the standards bodies are focused on OIDC.
- zrail 7y agoDisagree. Enterprise customers have SAML SSO deployed and want to use it. If you want to serve those customers at any sort of scale you need to implement SAML.
- youdontknowtho 7y agoLiterally all of those enterprise SSO systems support OIDC. ADFS, PING, OKTA, Azure AD, ETC...
- user5994461 7y agoSAML has two way authentication and some advanced security stuff. The IDP and the SP must be registered to one another and can actively sign and verify their transactions. It is noteworthy for some use cases like AWS or bank authentication. Nonetheless, we can all agree that SAML is an order of magnitude more difficult for no significant benefit. OpenID connect should be largely preferred.
- mosdl 7y agoYou can verify transactions in openid as well
- user5994461 7y agoopenid is a dead protocol that stopped being supported by major websites and authentication solutions years ago. Not to be confused with openid connect.