SAML

Security Assertion Markup Language (SAML) is an XML-based, open-standard data format for exchanging authentication and authorization data between parties (for example, between an identity provider and a service provider). SAML is typically used for web browser single sign-on (SSO).

How SAML works

The SAML specification defines three roles:

• Principal: Typically a user
• IdP: The identity provider
• SP: The service provider

The principal requests a service from the SP, which requests and obtains an identity assertion from the IdP. Based on the assertion, the SP decides whether or not to perform the service requested by the principal.

SAML in Qlik Sense

Qlik Sense supports SAML V2.0 by:

• Implementing an SP that can integrate with external IdPs

• Supporting HTTP Redirect Binding for SAML requests

• Supporting HTTP Redirect Binding and HTTP POST Binding for SAML responses

• Supporting SAML properties for access control of resources and data

Limitations:

• Qlik Sense does not support SAML message signature validation.