←  All terms
S
Security & Compliance

SAML

SAML is an XML-based standard for exchanging authentication and authorization data, commonly used for enterprise SSO.

SAML enables standardized exchange of authentication and authorization information between an identity provider and connected applications. It is widely used in enterprise environments to support Single Sign-On across multiple services. A secure implementation depends on correct configuration, trusted identity relationships, and appropriate technical and organizational controls. The concept is closely related to Single Sign-On and OpenID Connect.

Read more

Single Sign-On

OpenID Connect

SCIM

Webflow Enterprise

FAQ

SAML

When is SAML worth using for authentication?
It is worth it when an organization already runs a central identity provider and wants to connect enterprise applications to it. For small teams without a central identity system, the configuration effort is often out of proportion to the benefit. It should be checked upfront whether the application supports SAML in the plan in use.
What mistakes commonly occur when setting up SAML?
Common causes are expired certificates, misconfigured attributes such as email address or groups, clock drift between systems, and wrong callback URLs. Since certificates expire, a documented renewal process is needed. A test account before going live uncovers many of these errors.
How does a SAML login work?
The application, acting as service provider, redirects the user to the identity provider. The identity provider authenticates the user, issues a signed assertion, and sends it back. The application verifies the signature and grants access. Passwords never reach the application; it receives only the confirmed identity and its attributes.
How do SAML and OpenID Connect differ?
SAML uses XML and comes from the enterprise world, while OpenID Connect builds on OAuth 2.0 and JSON and is common in web and mobile apps. Both enable single sign-on. The choice usually depends on what the identity provider and the application support; SAML remains established in many corporate environments.