SAML 1.1 and SSL

Posted on 2014-08-20
Last Modified: 2014-08-21
I know that SAML 2.0 requires SSL

However, I have seen some examples using SAML 1.1, that seem to exclude SSL, not really sure

Does SAML 1.1 require SSL ?

Question by:Anthony Lucia
    1 Comment
    LVL 14

    Accepted Solution

    With SAML 1.1 it doesn't require SSL, but if the responder requires it - it will refuse the request. So the only way you don't need SSL is if both parties involved don't care about SSL (highly unlikely). With that said, not utilizing SSL is a gigantic security risk - especially when SAML 2.0 allows for self-signed.

    A secure connection is not required for SAML requests and responses, but in those situations where message integrity and confidentiality are required, HTTP over SSL 3.0 or TLS 1.0 with a server-side certificate is required.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    How to sign a powershell script so you can prevent tampering, and only allow users to run authorised Powershell scripts
    Phishing is at the top of most security top 10 efforts you should be pursuing in 2016 and beyond. If you don't have phishing incorporated into your Security Awareness Program yet, now is the time. Phishers, and the scams they use, are only going to …
    This video teaches viewers about errors in exception handling.
    This tutorial explains how to use the VisualVM tool for the Java platform application. This video goes into detail on the Threads, Sampler, and Profiler tabs.

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now