Skip to content

SAML

What is SAML?

Security Assertion Markup Language, an XML-based standard for exchanging authentication and authorization data between identity providers and service providers.

Information Security

Terms that appear alongside saml

Each of these is named in at least one of the same controls as saml. The number is how many controls name both.

Frameworks that govern saml

ISO 27001:2022View framework →NIST SP 800-53 Rev 5View framework →

What the standards actually require on saml

Requirements naming saml across 6 standards, quoted from the control text.

ITU-T X.805 - Security Architecture for End-to-End Communications3 controls

Security Dimension 2 Authentication per X.805 Clause 6.2: Authentication confirms that each party to a communication (for example a person, device, service or application) really is who it claims to be, and gives assurance that no party is impersonating anothe...

X805-Dim2-Authentication-Identity-Verification-Claimed-Identities-Entities-Communication · ITU-T X.805 Security Dimension 2 - Authentication + Identity Verification + Claimed Identity + Entity Authentication + Data Origin Authentication + Mutual Authentication + Multi-Factor + Cryptographic Authentication →
API 11641 control

The plan must require risk-appropriate access non-repudiation protections and identity proofing, and the binding of assigned unique digital identities (non-shared accounts, tokens, session keys) to real-life identities;

api-1164::PR.AC-6 · PR.AC-6 Non-repudiation, identity proofing and binding of digital identities to real identities →
AWS Well-Architected Security Pillar1 control

Federate workforce access to AWS through a single corporate identity provider via IAM Identity Center or SAML so that user lifecycle, MFA and access reviews are centrally governed.

SEC02-BP04 · Rely on a centralized identity provider →
HL7 FHIR Security Framework1 control

HL7 FHIR Authentication. SMART APP LAUNCH IMPLEMENTATION GUIDE v2.2.0 - foundational FHIR-based OAuth 2.0 / OAuth 2.1 + OpenID Connect framework + standardised app authorization.

HL7-FHIR-Auth-SMART-OAuth-OIDC-Backend · HL7 FHIR Authentication - SMART App Launch + OAuth 2.0 + OpenID Connect + Backend Services + Token Lifetime →
ISMAP (Japan)1 control

ISMAP Identity and Access Management requires comprehensive IAM controls covering customer + CSP + administrative + service-to-service identities.

ISMAP-Identity-Access-MFA-Privileged-Federation-SSO-API-Tokens-CloudIAM-PIV-PASETO · ISMAP Identity and Access Management - Cloud IAM + Multi-Factor Authentication + Privileged Access + Federation/SSO + API Security + Access Tokens + My Number Card Integration + Government IAM →
Kuwait National Cybersecurity Framework1 control

Kuwait NCF Protect function (Access). Access Control and Identity Management aligned with NIST SP 800-53 AC family + ISO 27001 A.9 + Zero Trust principles.

KNCF-Protect-Access-Control-IAM-Privileged-MFA-Zero-Trust-Identity-Lifecycle-IAG-PAM · Kuwait NCF Protect + Access Control + IAM + Privileged + MFA + Zero Trust + Identity Lifecycle →

Questions people ask about saml

What is SAML?
Security Assertion Markup Language, an XML-based standard for exchanging authentication and authorization data between identity providers and service providers.
Why is SAML important for compliance?
SAML is a key concept in Information Security. Understanding saml helps organizations meet regulatory requirements, reduce risk, and demonstrate due diligence during audits. Our compliance platform maps 1,016 frameworks with 316K cross-framework control mappings.
Which compliance frameworks address SAML?
SAML appears in the requirement text of ITU-T X.805 - Security Architecture for End-to-End Communications, API 1164, AWS Well-Architected Security Pillar, HL7 FHIR Security Framework, ISMAP (Japan). Across these standards we have identified 8 controls that name it directly, each linked to the control text on the compliance platform.
Where can I learn more about SAML?
Explore our compliance framework pages to see how saml applies across different standards and regulations. Our implementation guides provide step-by-step guidance, and the compliance platform offers AI-powered analysis of how this concept maps across 1,016 frameworks.

See how SAML applies across compliance frameworks

Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.

Explore on Platform
Written and maintained by Gerard Blokdyk, The Art of Service.