> For clean Markdown of any page, append .md to the page URL.
> For a complete documentation index, see https://docs.id.me/llms.txt.
> For AI client integration (Claude Code, Cursor, etc.), connect to the MCP server at https://docs.id.me/_mcp/server.

# Overview

> SAML 2.0 overview

This guide provides our partners with an overview and understanding of ID.me and the implementation of Security Assertion Markup Language (SAML).

## Background information

ID.me is an Identity Verification Network providing a range of identity proofing for Federal, State and Local governments,
organizations and commercial sector partners. ID.me is the only Credential Service Provider certified at NIST 800-63-2 LOA
1, 2, and 3, and NIST 800-63-3 IAL2/AAL2.

![Image showing how SAML connects to ForgeRock, ID.me, and okta](/_fern-files/idme.docs.buildwithfern.com/3cba79c2fb066e499e89353052240e4ac7a8219e4943f53eb181d0c63cfda259/images/saml/saml-background-info.svg)

ID.me's Identity Gateway platform provides a SAML 2.0 capable IdP service, which supports standardized, signed and encrypted assertions
and different attribute bundles. This functionality can be used to enable applications to participate in a federated single sign-on (SSO)
relationship with the ID.me network of credentials.

* Security Assertion Markup Language (SAML) is an open standard that allows an identity provider (IdP) to pass authorization credentials to a service provider (SP)
* SAML is an XML-based data format that allows businesses to communicate user authentication and authorization information to partner companies and enterprise applications their employees may use
* SAML uses X.509 certificates to sign and encrypt SAML assertions

The ID.me SAML 2.0 IdP supports assertions, protocol bindings and profiles in accordance with the [OASIS standard](https://www.oasis-open.org/). The SAML XML document includes:

* SAML 2.0 assertions and all protocol messages
* SAML 2.0 metadata
* Web browser single-sign-on profile
* Single logout profile
* Generation and verification of XML signatures
* XML encryption and signing
* HTTP POST and HTTP Redirect Binding

The following diagram shows an overview of the SAML flow. The "SP" in this diagram stands for "Service Provider", a.k.a the partner.

![Image showing the ID.me SAML authentication](/_fern-files/idme.docs.buildwithfern.com/bd869087d1c0878677ed49f520e2536a15abeab7a3495edb521968ceffabd007/images/saml/saml-auth-flow.svg)