Testing SAML and OIDC Authorization Flows with Postman
Visual Overview: sequenceDiagram participant User participant SP as Service Provider participant IdP as Identity Provider User->>SP: 1. Access Protected Resource SP->>User: 2. Redirect to IdP (SAML Request) User->>IdP: 3. SAML AuthnRequest IdP->>User: 4. Login Page User->>IdP: 5. Authenticate IdP->>User: 6. SAML Response (Assertion) User->>SP: 7. POST SAML Response SP->>SP: 8. Validate Assertion SP->>User: 9. Grant Access OAuth 2.0 and SAML are two of the most widely used protocols for authentication and authorization in modern web applications. While OAuth 2.0 is often associated with OIDC (OpenID Connect), SAML remains a popular choice for enterprise environments. Whether you’re building a new application or maintaining an existing one, testing the authorization flows for these protocols is crucial to ensure security and functionality. ...