Unverified50% confidenceFactExact time
An identity assertion is structured data issued by the identity provider in an SSO callback, usually appearing in the form of a SAML assertion or an OIDC ID Token.
1
Sources
50%
Confidence
Long-term
Relevance
11/4/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedAfter successful just-in-time provisioning, the binding between a stable identifier on the identity provider side (such as the OIDC sub or the SAML NameID) and the local user should be stored, to avoid re-matching by email on every login.72% similarUnverifiedEmployee identity usually reuses the enterprise's existing IdP for SSO, whereas customer identity often requires an independent IdP to support external user features such as social login and self-service registration.70% similarUnverified托管身份（Managed Identity）是Azure平台为运行在其上的服务自动颁发和轮换凭据的机制，凭据从不以明文形式出现在代码或配置文件中68% similarUnverifiedSAML conveys user identity and attributes in an XML-format assertion, which is usually signed by the IdP and pushed to the SP via the browser POST binding, and the SP must verify the signature and check conditions such as validity period and audience.67% similarUnverifiedAPI密钥或OAuth令牌作为访问凭证会被附加在请求头的 Authorization 字段中，通常格式为 Bearer sk-xxxxxxx66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1134497API
curl https://kongchang.com/api/v1/knowledge/claims/1134497MCP
get_claim(id=1134497)