SAML Middleware

The SAML middleware supports web applications acting as either a SAML service provider (SP) or identity provider (IdP), and participating in SAML single sign-on (SSO) and single logout (SLO).

Middleware vs API

When adding SSO support to your application, you have a choice between:

Approach	When to Use	Key Benefits
SAML middleware	- Standard SSO integration - Minimal application code	- Standard authentication model - Fewer lines of code
SAML API	- Custom SSO/SLO flows - More control - Reduce HTTP redirects	- Greater control over SSO and SLO - Can optimize HTTP flow

Either approach is valid and, if required, switching between the two is relatively straightforward.

If you are unsure which approach to take, we generally recommend calling the SAML API directly.

SAML Middleware - Service Provider

The SAML authentication handler enables SAML SSO and SLO when your application acts as a service provider.

SAML Middleware - Identity Provider

The SAML middleware enables SAML SSO and SLO when your application acts as an identity provider.