IAM02 - Understanding and using federation protocols (SAML, OIDC, OAuth)

Part 1 - History of Single Sign-On :

• Origin of access management issues
• Historical approaches: Station SSO and Web SSO
• Adaptive authentication and strong authentication
• Identity federation theory: principles and objectives

Part 2 - SAMLv2 Identity Federation:

• SAML protocol:

- History and concepts (metadata, assertion...)

- Flow : SP initiated or IDP initiated, Post Binding or Artifact Binding

- Single Log Out

• Implementation of SAML in a solution (application connection, enrichment of the SAML assertion, SLO)