SAML and enterprise federation, by ear
10 episodes, in order, 5 checked against transcripts. The protocol behind most workforce single sign-on, and how it compares with OIDC. Start at the top if the topic is new to you, or jump to the stage that matches where you are.
Start here: the basics
- 1#37 - Access Management with AndyIdentity at the Center · 2020-03-30 · 36 min · Learner
An entry-level tour of access management: why OIDC and SAML exist, and how scopes and protocol flows fit into single sign-on.
Andy Clark (Okta)saml 2 0 - 2SAML with Joni Brennan, Paul Madsen and Prateek MishraIdentity, Unlocked · 2022-08-31 · 42 min · Learner
How the SAML protocol works, who built it and why, and how OpenID Connect later took over as the place where federation innovation happens.
- 3Analyst Chat #188: Beyond Tradition - The Evolution and Integration of Access ManagementKuppingerCole Analyst Chat · 2023-09-04 · 14 min · Learner
Where identity federation sits inside the broader access management market, and how SSO, federation and authentication have merged into one product category.
Checked against the transcriptAlejandro Leal (KuppingerCole)saml 2 0 - 4#296 - Allan Foster Walks Down IAM Memory LaneIdentity at the Center · 2024-07-29 · 70 min · Learner
The history behind SAML through the Liberty Alliance and Kantara, and why trust frameworks and federations mattered as much as the protocol itself.
Allan Foster (Digital Identity Advancement Foundation)saml 2 0
In practice: rollouts and operations
- 5#337 - Adaptive Authentication and Fraud Prevention with Ping's Patrick HardingIdentity at the Center · 2025-03-17 · 58 min · Practitioner
The practical trade-offs between SAML and OpenID Connect for SaaS single sign-on, and what it takes to modernize older applications onto newer federation protocols.
Patrick Harding (Ping Identity)saml 2 0 - 6Securing a Global Giant: Inside IKEA's Identity Strategy with MartinEntra.Chat · 2025-04-11 · 55 min · Practitioner
How enterprise SAML and OIDC integrations went from months of custom work to hours, and how SCIM provisioning now pairs with federated SSO.
Checked against the transcriptMartin Sandren (Inter IKEA)scim 2 0 - 7Getting Rid of ADFS featuring Sander BerkouwerHybrid Identity Protection Podcast · 2025-07-21 · 29 min · Practitioner
Why organizations are retiring AD FS as their on-premises SAML federation server, and the practical steps for moving that SSO to Microsoft Entra ID.
Sander Berkouwer (Microsoft MVP)saml 2 0 - 8Analyst Chat #303: B2B Identity & Access Management - A New Market UnpackedKuppingerCole Analyst Chat · 2026-06-15 · 30 min · Practitioner
What partner-facing federation demands at scale: federating with thousands of organizations, delegated administration, federation assurance levels, and trusting external HR processes.
Checked against the transcriptJohn Tolbert (KuppingerCole)saml 2 0
Going deeper: standards, architecture, and attacks
- 9Episode 46: The SAML RambleCritical Thinking: Bug Bounty Podcast · 2023-11-23 · 41 min · Architect
How attackers test SAML service providers: signature exclusion, XML signature wrapping, XXE, XSLT injection and token recipient confusion, with real HackerOne reports.
Checked against the transcript - 10Hunting the Bad Guys Behind Golden SAML AttacksCybersecurity Unplugged · 2022-08-08 · 25 min · Architect
How AD FS issues SAML tokens, how a Golden SAML attack forges those tokens, and how correlating signals across security products can detect it.
Checked against the transcriptYonatan Khanashvili (Hunters)saml
How this list was built
Episodes are chosen for what they teach, not for who published them, and ordered so each one builds on the last. Each note is checked against the episode's published transcript where one exists (marked under the episode) and against its show notes otherwise. Vendor-produced shows are labelled on their directory profiles. Know a better episode for a step on this path? Email [email protected].