New answers tagged


Yes, the SP can send a user id to the Idp as part of the AuthnRequest by including a <saml:Subject> element.


SAML and OAuth 2 are protocols for authentication/authorization. JSON Web Tokens (JWT) is a specification for a token that can be used in many applications or protocols - it also happens that the OpenID Connect (OIDC) protocols uses the JWT standard. SAML also defines its own token: SAML Assertion; as does OAuth 2: Access Token. Tokens are used by ...

Top 50 recent answers are included