Unverified50% confidenceFactExact time
In an SSO flow, the authentication assertion sent by the IdP to the application is usually carried in the form of a SAML assertion or an OIDC ID Token.
1
Sources
50%
Confidence
Long-term
Relevance
10/20/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedImplementing conditional access usually requires the identity provider (IdP) to support claim extensions such as acr and amr in SAML/OIDC, and to be able to pass policy decision results to the application.73% similarUnverifiedauthentik 提供集中的身份提供方（IdP），让下游应用通过标准协议接入统一认证流程，支持单点登录（SSO）69% similarUnverifiedID-JAG is a grant that can be used directly in OAuth 2.0 authorization flows, enabling resource servers to avoid tracing back to the IdP for re-validation each time.69% similarUnverifiedThe ideal architecture is to establish an authentication adapter layer at the system boundary that handles SAML interactions with enterprise IdPs and then uniformly converts them internally into OIDC ID Tokens or internal JWTs, so that core business code never directly touches SAML's XML.67% similarUnverifiedSAML supports both SP-initiated and IdP-initiated login flows.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1077509API
curl https://kongchang.com/api/v1/knowledge/claims/1077509MCP
get_claim(id=1077509)