Organizations are deploying distributed, hybrid architectures that can span multiple security domains. At any moment, a user could be accessing the corporate data center, the organization\u2019s cloud infrastructure, or even a third party, SaaS web application. SAML can provide the identity information necessary to implement an enterprise-wide single sign-on solution.
\nProving or asserting one\u2019s identity in the physical world is often as simple as showing a driver\u2019s license or state ID card. As long as the photo matches the face, that\u2019s typically all that is needed to verify identity. This substantiation of identity is a physical form of authentication, and depending on the situation, the individual is then authorized either to receive something or to do something, for instance, enter a bar, complete a purchase, etc.
\nIn the digital world, identity verification is not as easy as showing the computer monitor a driver\u2019s license. To gain entry, you must provide information like a name, password, randomly generated token number\u2014something you have, something you know, or something you are\u2014to prove you are who you say you are.<\/p>\n