Simplicity

End-users has a single username and password to access all services in a federation.

Easy and efficient

Deploying new services is simple and fast since the security infrastructure does not have to be developed and built each time.

Take control of the Security

The consumer can always control the security level on the service and the end-users cannot avoid established password policies to services.

Here is how the basic process for an authorization process between a Service Provider and an Identity Provider works:

1. User requests something from the Service Provider
2. Service Provider verifies if the users has a SAML ticket
3. User gets redirected to the Identity Provider
4. Identity Provider authorizes the user
5. Identity Provider creates a SAML ticket
6. User gets redirected to the Service Provider
7. Service Provider verifies the SAML ticket
8. Service Provider returns the requested information to the user