Using SAML and OpenID Connect applications

To fully embrace the capabilities of Okta's SSO, it is recommended to use federation protocols such as Security Assertion Markup Language (SAML) and OpenID Connect (OIDC). Both handle and look at login flows differently, but they share one common feature, they allow an application to delegate their authentication to an Identity Provider (IdP) such as Okta. This means that there is no reason to have a password in your application anymore. The user is no longer responsible for a strong unused password, but the application will refer to the IdP for authentication. We will be looking at both, to see what they have in common and where they differ.

SAML is a framework built upon XML and allows interactions between an IdP and Service Provider (SP), to communicate user authentication, entitlement, and attribute information. The flexibility of the XML allows it be modified and to send different relevant information based on the integration...