4 ms·

Literally all of those enterprise SSO systems support OIDC. ADFS, PING, OKTA, Azure AD, ETC...

• user5994461 7y ago
  SAML has two way authentication and some advanced security stuff. The IDP and the SP must be registered to one another and can actively sign and verify their transactions. It is noteworthy for some use cases like AWS or bank authentication. Nonetheless, we can all agree that SAML is an order of magnitude more difficult for no significant benefit. OpenID connect should be largely preferred.
  • mosdl 7y ago
    You can verify transactions in openid as well
    • user5994461 7y ago
      openid is a dead protocol that stopped being supported by major websites and authentication solutions years ago. Not to be confused with openid connect.