SAML | Overview

Security Assertion Markup Language (SAML) is an open standard, XML-based markup language for exchanging authentication and authorization data between parties: an identity provider and service provider. The identity provider (IdP) is software that confirms your federated identity—your electronic identity and attributes—and links you to the service provider, which in this case is Tracker. A federated identity can be stored across multiple distinct identity management systems and lets a user's single authentication token to be trusted across multiple systems or even organizations.
A common use of SAML is to implement single sign-on (SSO). SSO lets users log on to multiple applications without having to keep track of a proliferation of user names and passwords. Without single-sign on, users must authenticate twice: first to the user's corporate network, and again to Tracker.
Contact your Client Support Manager or Legal Tracker support if you are interested in enabling SAML authentication.
Enhanced Security Benefits of SSO
Customers who use single sign-on are usually seeking enhanced security. Requiring authentication on a corporate network before allowing access to Tracker provides multiple options beyond password security.
  • When employees leave your company, disabling their logins to third party applications can be a slow process, possibly exposing legal information and systems to former employees. By requiring your users to log in using SSO, disabling users on your corporate network automatically removes their ability to log in to Legal Tracker and any other applications they may have used.
  • Companies with specialized authentication requirements, such as unusual password policy restrictions or hardware tokens, typically want comparable security in third party applications. With SSO, the same authentication technology used on your corporate network controls access to Tracker and other Thomson Reuters Legal applications.

Related content