Unverified50% confidenceFactExact time
SAML conveys user identity and attributes in an XML-format assertion, which is usually signed by the IdP and pushed to the SP via the browser POST binding, and the SP must verify the signature and check conditions such as validity period and audience.
1
Sources
50%
Confidence
Long-term
Relevance
11/4/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA SAML response is digitally signed XML, and its signature verification and identity attribute extraction often use different XML parsers, different XPath expressions or different namespace handling, causing parser differential inconsistency.77% similarUnverifiedA SAML assertion is an XML-format security token issued by an enterprise IdP and digitally signed using the IdP's private key.74% similarUnverifiedIn a SAML assertion, the email verification status may be expressed through an attribute statement or AuthnContext.74% similarUnverifiedThe SAML assertion consumer service endpoint (ACS URL) must exactly match the receiving endpoint configured on the SP side, including protocol (usually https), domain, port, and path; any character difference will cause the assertion to fail to be delivered or to be rejected by the SP.73% similarUnverifiedAn identity assertion is structured data issued by the identity provider in an SSO callback, usually appearing in the form of a SAML assertion or an OIDC ID Token.67% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1134502API
curl https://kongchang.com/api/v1/knowledge/claims/1134502MCP
get_claim(id=1134502)