# SAML and enterprise federation: podcast learning path

Source: https://startwithidentity.com/podcasts/learn/saml/

The protocol behind most workforce single sign-on, and how it compares with OIDC. 12 episodes, ordered from basics to advanced.

Read alongside: [SAML 2.0](https://startwithidentity.com/standards/saml-2-0/), [SAML (glossary)](https://startwithidentity.com/glossary/saml/), [SAML vs OIDC](https://startwithidentity.com/guides/fundamentals/saml-vs-oidc/), [Listening plan: OAuth, OIDC, SAML and passkeys for beginners](https://startwithidentity.com/articles/learn-identity-podcasts-oauth-oidc-saml-passkeys/)

1. [#37 - Access Management with Andy](https://creators.spotify.com/pod/profile/identity-at-the-center/episodes/37---Access-Management-with-Andy-ebnppr) (Identity at the Center, 2020-03-30, 36 min, learner): An entry-level tour of access management: why OIDC and SAML exist, and how scopes and protocol flows fit into single sign-on.
2. [SAML with Joni Brennan, Paul Madsen and Prateek Mishra](https://open.spotify.com/episode/72Rjj6ua78CLMPZaymCbVw) (Identity, Unlocked, 2022-08-31, 42 min, learner): How the SAML protocol works, who built it and why, and how OpenID Connect later took over as the place where federation innovation happens.
3. [Analyst Chat #188: Beyond Tradition - The Evolution and Integration of Access Management](https://www.kuppingercole.com/watch/evolution-integration-of-access-management) (KuppingerCole Analyst Chat, 2023-09-04, 14 min, learner): Where identity federation sits inside the broader access management market, and how SSO, federation and authentication have merged into one product category.
4. [#296 - Allan Foster Walks Down IAM Memory Lane](https://podcasts.apple.com/us/podcast/296-allan-foster-walks-down-iam-memory-lane/id1471899975?i=1000663663261) (Identity at the Center, 2024-07-29, 70 min, learner): The history behind SAML through the Liberty Alliance and Kantara, and why trust frameworks and federations mattered as much as the protocol itself.
5. [#337 - Adaptive Authentication and Fraud Prevention with Ping's Patrick Harding](https://podcasts.apple.com/us/podcast/337-adaptive-authentication-and-fraud-prevention/id1471899975?i=1000699477774) (Identity at the Center, 2025-03-17, 58 min, practitioner): The practical trade-offs between SAML and OpenID Connect for SaaS single sign-on, and what it takes to modernize older applications onto newer federation protocols.
6. [Securing a Global Giant: Inside IKEA's Identity Strategy with Martin](https://entra.news/p/securing-a-global-giant-inside-ikeas) (Entra.Chat, 2025-04-11, 55 min, practitioner): How enterprise SAML and OIDC integrations went from months of custom work to hours, and how SCIM provisioning now pairs with federated SSO.
7. [Getting Rid of ADFS featuring Sander Berkouwer](https://www.hipconf.com/podcast/getting-rid-of-adfs-featuring-sander-berkouwer/) (Hybrid Identity Protection Podcast, 2025-07-21, 29 min, practitioner): Why organizations are retiring AD FS as their on-premises SAML federation server, and the practical steps for moving that SSO to Microsoft Entra ID.
8. [Analyst Chat #303: B2B Identity & Access Management - A New Market Unpacked](https://www.kuppingercole.com/watch/b2b-iam-new-market-unpacked) (KuppingerCole Analyst Chat, 2026-06-15, 30 min, practitioner): What partner-facing federation demands at scale: federating with thousands of organizations, delegated administration, federation assurance levels, and trusting external HR processes.
9. [FastFed with Darin McAdams](https://open.spotify.com/episode/6DZKLbwns0Fx2vw3gPFr5V) (Identity, Unlocked, 2021-04-04, 29 min, practitioner): Explains why setting up enterprise SAML or OIDC federation and SCIM provisioning is slow and manual, and how OpenID FastFed aims to make it push-button.
10. [Episode 46: The SAML Ramble](https://www.criticalthinkingpodcast.io/episode-46-the-saml-ramble/) (Critical Thinking: Bug Bounty Podcast, 2023-11-23, 41 min, architect): How attackers test SAML service providers: signature exclusion, XML signature wrapping, XXE, XSLT injection and token recipient confusion, with real HackerOne reports.
11. [Hunting the Bad Guys Behind Golden SAML Attacks](https://www.bankinfosecurity.com/interviews/hunting-bad-guys-behind-golden-saml-attacks-i-5106) (Cybersecurity Unplugged, 2022-08-08, 25 min, architect): How AD FS issues SAML tokens, how a Golden SAML attack forges those tokens, and how correlating signals across security products can detect it.
12. [Browser Changes on Identity Protocols with Sam Goto and George Fletcher](https://open.spotify.com/episode/1A6W2CBadwFOri0E2PfIUm) (Identity, Unlocked, 2021-04-18, 41 min, architect): Explains how browser privacy changes to third-party cookies, iframes, and redirects affect federated login, and the classification problem of telling federation from tracking.