SAML is an XML-based open standard used for exchanging authentication and authorization data between an identity provider, a producer of assertions, and a service provider, a consumer of assertions. SAML product belongs to the OASIS Security Services Technical Committee.

SAML protocol does not provide rules for determining the identity and access levels of a subject. The SAML protocol shares the authentication and authorization information of an identity between the issuer of the information, called as the identity provider and the relying party or the consumer of the information, called as the service provider.