Question: is saml for authentication or authorization?
Answer: SAML, pronounced “sam-el,” stands for Security Assertion Markup Language. It's an open standard that provides both authentication and authorization. Similar to the terminology of the other two standards, SAML defines a principal, which is the end user trying to access a resource.