Understanding the SAML 2.0 Web SSO Flow
Flowcharts & Algorithms diagram · made in Skemio

What it shows
- The Service Provider redirects the browser with an encoded AuthnRequest.
- The Identity Provider handles authentication and signs an XML assertion.
- The user agent POSTs the signed assertion back to the ACS URL.
The takeaway
SAML passes trust via cryptographically signed tokens forwarded through the client's browser.
- #SAML
- #SSO
- #IdentityManagement
- #InfoSec
- #CyberSecurity
- #WebSecurity





