Question: how do saml tokens work?
Answer: SAML SSO works by transferring the user's identity from one place (the identity provider) to another (the service provider). ... The application identifies the user's origin (by application subdomain, user IP address, or similar) and redirects the user back to the identity provider, asking for authentication.