Q23: How does SAML 2.0 compare with OAuth 2.0 and OpenID Connect (OIDC)?
- SAML 2.0 (Security Assertion Markup Language): An XML-based enterprise federation standard primarily used for Single Sign-On (SSO) in legacy corporate environments. Exchanges XML assertions over heavy HTTP POST redirects.
- OAuth 2.0 / OIDC: A modern JSON/REST API-friendly framework built for web, mobile, and single-page applications. Uses lightweight JSON Web Tokens (JWT) and HTTPS Authorization headers.
Key Takeaways
- SAML 2.0 relies on heavy XML payloads for legacy corporate enterprise SSO.
- OIDC/OAuth 2.0 utilizes lightweight JSON payloads designed for modern APIs and mobile platforms.