Our first Identity Federation integration was Active Directory, mainly due to its popularity with companies and universities at the time. Here we are, a few years later, bolting on two more identity federation systems onto YAROOMS - SAML and Google Sign-In.
What is SAML and what does it do?
SAML (Security Assertion Markup Language) is an open standard for exchanging authentication and authorization data between parties, in particular, between an identity provider and a service provider.
The most common use case for SAML is SSO (Single Sign On) which allows for the exchange of information between the Service Provider (YAROOMS) and the Identity Provider (SAML2.0 server), at the web browser level. What this effectively means is that your staff will be able to log in to YAROOMS with their current company credentials without actually giving YAROOMS access to them. By enabling SAML, you can connect YAROOMS with any SAML-compatible Identity Provider (IDP), amongst which:
- OneLogin (Generic SAML2.0 provider)
- Active Directory Federation Services (ADFS)
- Google GSuite SAML