Concept: SAML SSO

Security Assertion Markup Language (SAML) is an open-standard, XML-based format for exchanging authentication and authorization between an identity provider and a service provider. One of its advantages is that it makes single sign-on (SSO) possible between multiple online services.

This documentation walks you through setting up SAML 2.0- and SAML 3.0-based SSO between identity providers like Microsoft Active Directory Federation Services 2.0 or 3.0 (MS-AD FS 2.0 or MS-AD FS 3.0), Okta, or PingOne and .

If you would like to configure SAML 2.0- or SAML 3.0-based SSO with another Identity Provider, you will follow steps similar to the ones listed. You must ensure that your Identity Provider supports SAML 2.0 or SAML 3.0 and either Identity Provider Initiated SSO or Service Provider Initiated SSO (these are the modes supported by Authentication).

This documentation also walks through how to set up SAML SSO for Workday users who use .