1.1.7.3 Configuring SAML Single Sign-On
SALT supports SAML 1.1 and SAML 2.0 Single Sign-On (SSO). You can use Single Sign-On to process a secure incoming request by performing authentication on behalf of the end user, without having to request their credentials.
The SALT implementation of SAML SSO supports the sender-vouches confirmation method. With this method, SALT represents a back-end system, and a Web Service intermediary sits between the back-end and the end user. In this case, the Web Service intermediary "vouches" for the end user using SAML token mechanisms.
Note:
In order to use SAML SSO, make sure you have correctly configured the<Certificates>
element in the SALTDEPLOY
file.
Parent topic: Configuring Security Features