Security Assertion Markup Language (SAML) is an open-standard protocol that uses an XML framework to exchange security information between an authority and a trusted partner site. The security information concerns itself with a subject's authentication status, access authorization and attribute information. (A person identified by an email address is a subject as might be a printer.) A SAML authority (also referred to as the asserting party) is a platform or application that has been integrated with SAML API, allowing it to relay security information. For example, asserting that a subject has been authenticated into its system by passing the required attributes. Trusted partner sites receive the security information and rely on its authenticity.
Note – By default character escaping is enabled so that you can use the following special characters in SAML 1.x attributes in the OpenSSO console:
&
<
>
“
'
/
To disable character escaping:
In the OpenSSO Console, go to Configuration>Servers and Sites>Default Server Setting>Advanced.
Enter the com.sun.identity.saml.escapeattributevalue as the key, and false as the value.
Restart the server.
If you wish to enable character escaping, change the value to true and restart the server.
The following SAML attributes can be configured for your implementation by clicking the Local Site Properties button:
The following tasks are associated with configuring SAML: