!!! Overview * An [issuing authority|Identity Provider (IDP)] asserts that subject "S" was authenticated by means "M" at time "T" * Targeted towards [SSO] uses * Checking or revoking of credentials is not in scope for SAML! * It merely lets you link back to acts of authentication that took place previously !!Eaxmple {{{ <saml:Assertion ...> <saml:AuthenticationStatement AuthenticationMethod="password" AuthenticationInstant="2009-12-03T10:02:00Z"> <saml:Subject> <saml:NameIdentifier SecurityDomain=cisus.com" Name="jimuser" /> <saml:ConfirmationMethod> http://...core-25/sender-vouches </saml:ConfirmationMethod> </saml:Subject> </saml:AuthenticationStatement> </saml:Assertion> }}} !! More Information There might be more information for this subject on one of the following: [{ReferringPagesPlugin before='*' after='\n' }]