RFC 6595

"A Simple Authentication and Security Layer (SASL) and GSS-API Mechanism for the Security Assertion Markup Language (SAML)", April 2012

Canonical URL:

http://www.rfc-editor.org/rfc/rfc6595.txt
This document is also available in this non-normative format: PDF.

Status:

PROPOSED STANDARD

Authors:

K. Wierenga
E. Lear
S. Josefsson

Stream:

IETF

Source:

kitten (sec)

Please refer here for any errata for this document. To submit a new errata report, go to the main errata page.

Abstract

The Security Assertion Markup Language (SAML) has found its usage on the Internet for Web Single Sign-On. The Simple Authentication and Security Layer (SASL) and the Generic Security Service Application Program Interface (GSS-API) are application frameworks to generalize authentication. This memo specifies a SASL mechanism and a GSS-API mechanism for SAML 2.0 that allows the integration of existing SAML Identity Providers with applications using SASL and GSS-API. [STANDARDS-TRACK]

For the definition of Stream, see RFC 4844.