The Difference Between SAML 2.0 and OAuth 2.0
“Even though SAML was actually designed to be widely applicable, its contemporary usage is typically shifted towards enterprise SSO scenarios. On the other hand, OAuth was designed for use with applications on the Internet, especially for delegated authorisation.”
- from
- IAM
- added
- 2026-10-10
- likes
- 0
similar
-
SAML vs. OAuth web.archive.org
“OAuth is a protocol for authorization: it ensures Bob goes to the right parking lot. In contrast, SAML is a protocol for authentication, or allowing Bob to get past the guardhouse.”
-
What's the Difference Between OAuth, OpenID Connect, and SAML? okta.com
Identity is hard. Another take on the different protocol is always welcome to help makes sense of it all.
-
urn:ietf:params:oauth:grant-type:saml2-bearer datatracker.ietf.org
Security Assertion Markup Language (SAML) 2.0 Profile for OAuth 2.0 used to authorize a client to get an access token with a SAML assertion issued by a trusted provider.
-
OAuth 2 Simplified aaronparecki.com
A reference article describing the protocol in simplified format to help developers and service providers implement it.
-
OAuth 2.0 and OpenID Connect (in plain English) youtube.com
Starts with an historical context on how these standards came to be, clears up the inaccuracies in the vocabulary, then details the protocols and its pitfalls to make it less intimidating.
-
Open-Sourcing BuzzFeed's SSO Experience increment.com
OAuth2-friendly adaptation of the Central Authentication Service (CAS) protocol. You'll find there good OAuth user flow diagrams.
IAM › SAML: ““Even though SAML was actually designed to be widely applicable, its contemporary usage is typically shifted towards enterprise SSO scenarios. On the other hand, OAuth was designed for use with applications on the Internet, especially for delegated authorisation.””