Re: [security-services] Question regarding SAML usage

[Nate Klingenstein <ndk@internet2.edu>]

John,

To expand a bit on this answer, we don't keep authoritative statistics  
or track SAML usage beyond what deployers happen to volunteer to us.

There is indeed widespread deployment of SAML within the education and  
research spaces.  This includes some major players in the health  
sciences, e.g. university hospitals and the National Institutes of  
Health, for starters.

There has also been a healthcare standard developed by David Staggs of  
the VA within the SSTC, the technical committee responsible for SAML.

http://docs.oasis-open.org/security/xspa/v1.0/saml-xspa-1.0-os.html

Other industries (e.g. the MLS) have made SAML 2.0 an outright,  
explicit standard.  In others, it is an implicit standard, and it is  
often used for pairwise corporate relationships.

Many major SaaS and PaaS vendors feature SAML 2.0 support.

Hopefully this is enough general background to help you make an  
informed decision.  If you have a more focused question, we might be  
able to refer you to a more focused answer.

Thanks for your interest in SAML,
Nate.

On Feb 7, 2012, at 8:40 , Leif Johansson wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> On 02/07/2012 02:16 AM, Mrs. Dee Schur wrote:
> > Are there statistics on the real-market use of SAML for federated
> > identity assertions?
> >
> > John Moehrke Principal Engineer: Interoperability and Security GE
> > Healthcare
>
> In R&E space refeds.org keeps a list [1] of sorts. You'll have to  
> dig a
> bit but there are stats for number of users, services and idps in  
> there.
> This stuff is 99.9% SAML today.
>
> 	Cheers Leif
>
>
> [1] https://refeds.org/resources_list.html
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.11 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAk8w44sACgkQ8Jx8FtbMZneXywCdHr/hW7498E1BtBCIQKq1ViRq
> EaYAoILnLtWGXMR1PLGYF24AHKIeq664
> =6C/7
> -----END PGP SIGNATURE-----
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: security-services-unsubscribe@lists.oasis-open.org
> For additional commands, e-mail: security-services-help@lists.oasis-open.org