SAML vs federated login with OAuth

Question

What's the difference between SAML and federated login with OAuth? Which solution makes more sense, if a company wants to use a third-party webapp, and but also wants single sign-on and be the authentication authority?

Answer 1

SAML has a variety of "profiles" to choose from allow other users to "log in" to your site. SAML-P or SAML Passive is very common and fairly simple to set up. WS-Trust is similar and it too allows for federation among websites.

OAuth is designed for authorization. You can read more here:

http://stackoverflow.com/questions/1087031/whats-the-difference-between-openid-and-oauth