Overview#

• An issuing authority asserts that subject "S" was authenticated by means "M" at time "T"
• Targeted towards SSO uses
• Checking or revoking of credentials is not in scope for SAML!
• It merely lets you link back to acts of authentication that took place previously

Eaxmple#

<saml:Assertion ...>  
	<saml:AuthenticationStatement    
		AuthenticationMethod="password"
		AuthenticationInstant="2009-12-03T10:02:00Z">
		<saml:Subject>
			<saml:NameIdentifier
				SecurityDomain=cisus.com"
				Name="jimuser" />
			<saml:ConfirmationMethod>
				http://...core-25/sender-vouches
			</saml:ConfirmationMethod>
		</saml:Subject>
	</saml:AuthenticationStatement>
</saml:Assertion>

More Information#

There might be more information for this subject on one of the following:

• SAML Assertions