### SAML1.x

Security Assertion Markup Language (SAML) is an open-standard protocol that uses an XML framework to exchange security information between an authority and a trusted partner site. The security information concerns itself with a subject's authentication status, access authorization and attribute information. (A person identified by an email address is a subject as might be a printer.) A SAML authority (also referred to as the asserting party) is a platform or application that has been integrated with SAML API, allowing it to relay security information. For example, asserting that a subject has been authenticated into its system by passing the required attributes. Trusted partner sites receive the security information and rely on its authenticity.

Note – By default character escaping is enabled so that you can use the following special characters in SAML 1.x attributes in the OpenSSO console:

- &

- <

- >

- “

- '

- /

To disable character escaping:

1. In the OpenSSO Console, go to Configuration>Servers and Sites>Default Server Setting>Advanced.

2. Enter the `com.sun.identity.saml.escapeattributevalue` as the key, and `false` as the value.

3. Restart the server.

If you wish to enable character escaping, change the value to `true` and restart the server.

The following SAML attributes can be configured for your implementation by clicking the Local Site Properties button:

- Target Specifier

- Site Identifiers

- Trusted Partners

- Target URLs

- Assertion Timeout

- Assertion Skew Factor for `notBefore` Time

- Artifact Timeout

- SAML Artifact Name

- Sign SAML Assertion

- Sign SAML Request

- Sign SAML Response

The following tasks are associated with configuring SAML:

- To Configure a Site Identifier

- Trusted Partners: Selecting Partner Type and Profile

- Trusted Partners: Configuring Trusted Partner Attributes

- To Configure a Target URL