1. Administering Oracle Identity Cloud Service
  2. Perform Identity Administration
  3. Manage Oracle Identity Cloud Service Applications
  4. Architecture: SAML and Provisioning Integration with Oracle Identity Cloud Service
  5. Architecture Diagram Defining Oracle Identity Cloud Service and SAML Integration

Architecture Diagram Defining Oracle Identity Cloud Service and SAML Integration

Security Assertion Markup Language (SAML) is an XML-based system for authentication and authorization between a Service Provider (SP) and an Identity Provider (IdP). It is a standard single sign-on (SSO) format where authentication information is exchanged through digitally signed XML documents.

In this process, the SP trusts the IdP to authenticate users and in return, the IdP generates an authentication assertion suggesting that a particular user has been authenticated.

The following architecture diagram illustrates the integration between Oracle Identity Cloud Service and SAML.

Figure 5-1 Architecture Diagram: Oracle Identity Cloud Service and SAML Integration

Description of Figure 5-1 follows
Description of "Figure 5-1 Architecture Diagram: Oracle Identity Cloud Service and SAML Integration"
SAML Authentication includes three important roles:

  • Oracle Identity Cloud Service as the Identity Provider

  • Pre-integrated Cloud Services as the Service Provider

  • User (Web Browser/ Mobile Device)

Oracle Identity Cloud Service SAML integration currently supports the following features:

  • SP initiated Web SSO

  • IdP initiated Web SSO

  • SP initiated Single Logout

  • IDP initiated Single Logout

Oracle Identity Cloud Service provides a generic SAML template to connect to all custom SAML applications.

All applications listed in the Oracle Identity Cloud Service Application Catalog are partially configured templates. These applications are created and maintained by Oracle and contain pre-built integrations with major cloud services making them simple and convenient. Using these applications, you can configure SSO and configure other functionalities in a standard format.