I came across SAML and kerberos, both are used to establish identity using assertions (tickets) so is there an overlap in their use ?

Can somebody highlight their differences and point which technology is a better fit where.


update to add some context, there are some web services in an intranet environment where only a closed set of users should be allowed to access it. Is this requirement better suited for SAML or kerberos

  • 2
    You might be interested in Kerberos over the Public Internet, which bears on your question.
    – gowenfawr
    Feb 11, 2014 at 18:14
  • This is somewhat of a broad question.
    – Steve
    Feb 11, 2014 at 18:32
  • @gowenfawr your lead was very helpful, thanks. I have added some context to my question, its a closed system. so key exchange may be a possibility
    – mzzzzb
    Feb 12, 2014 at 2:20

1 Answer 1


SAML is used over the Internet. If you have a web application you would use SAML. SAML is just a standard data format for exchanging authentication data. You would typically use it for a web SSO (single sign on).

Kerberos is used in an enterprise LAN typically. Kerberos requires that the user it is authenticating is in the kerberos domain.

Not really a lot of overlap in my opinion.

Not the answer you're looking for? Browse other questions tagged or ask your own question.