SAML (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between an Identity Provider (IdP) and a Service Provider (SP). With SAML SSO, users authenticate once to their IdP (Okta, Azure AD, Google Workspace, JumpCloud, OneLogin) and gain access to connected applications without separate passwords.
The SAML flow: user requests a resource at the SP → SP redirects to IdP for authentication → IdP authenticates and returns a signed SAML assertion → SP validates the assertion and grants access.
Most B2B SaaS vendors offer SAML SSO on standard or enterprise tiers. SAML pairs naturally with SCIM provisioning to automate user lifecycle (create, update, deactivate) based on IdP group membership.