Create and exchange cryptographic keys for saml.
创建并交换用于SAML的加密密钥。
Client request with SAML token.
带有saml令牌的客户机请求。
Myth: SAML is a complicated design.
不实说法：SAML是一个复杂的设计。
The SAML security token is returned.
返回SAML安全令牌。
Security Assertion Markup Language (SAML).
安全断言标记语言(SAML)。
Myth: SAML is an authentication authority.
不实说法：SAML是一个认证权威机构。
By default, SAML 1.1 assertions are supported.
在默认情况下，支持SAML 1.1断言。
Validate the digital sign of the SAML assertion.
验证SAML断言的数字签名。
Ideally the SAML assertion should be signed by STS.
理想情况下，SAML断言应该由STS签署。
Two profiles are defined in the SAML specification.
SAML规范中定义了两个配置文件。
The default implementation of AAP supports SAML 1.1.
AAP的默认实现支持SAML 1.1。
What are the security risks in an SAML-based system?
基于SAML的系统的安全风险是什么？
Myth: SAML is easy to break using replay techniques.
不实说法：使用重播技术可以轻易地攻破SAML。
Currently only one binding, SAML over SOAP, is defined.
目前只定义了一种绑定，SOAP上的SAML。
SAML does not define attribute meanings for any industry.
SAML并未为任何行业定义属性含义。
SAML has no provision for providing anonymous authentication.
SAML没有用于提供匿名认证的功能。
The SAML specification is made up of the following components
SAML规范由以下部分组成
The secured response contains the requested SAML security token.
安全的响应包含所请求的SAML安全令牌。
SAML is an authentication protocol that is used between servers.
SAML是一个在服务器之间使用的认证协议。
This defines the way that SAML requests and receives assertions.
这个协议定义了SAML请求和接收断言的方式。
Misunderstanding: SAML is a complete identity management solution.
误解：SAML是一个完整的身份管理解决方案。
The third (which is not shown) deals with SAML in the Web browser.
第三种方法(没有显示)处理Web浏览器中的SAML。
Myth: SAML does not handle anonymous or guest access automatically.
不实说法：SAML不能处理匿名或访客(guest)访问。
The web service provider has a set of SAML policy set and bindings.
Web服务提供者拥有一组SAML策略集和绑定。
Risks associated with SAML protocol bindings (presently SOAP binding).
与SAML协议绑定(目前只有SOAP绑定)有关的风险。
SAML is often touted as a provider of a single sign-on (SSO) mechanism.
SAML常常被吹捧提供了一种单点登录(SSO)机制。
The stylesheet saves a subset of SAML information in a context variable.
——这个样式表将SAML信息的一个子集存储在一个上下文变量中。
However, for simplicity we will configure STS not to sign SAML assertion.
但为简便起见，我们将STS配置为不签署SAML断言。
From the sample request XML, user identity is passed in as SAML assertion.
在这个请求示例中，以SAML断言的形式传递用户身份信息。
The code is taken from the SAML sample implementation provided by Verisign.
这段代码来自Verisign所提供的SAML示例实现。
应用推荐