Team, kindly help me how to implement SAML based authentication for iPhone application. I have .NET REST based JSON webservice as my backend service.
Kindly advice me on this requirement.
SAML was simply not designed for modern application types, such as SPAs and mobile apps. Instead of fighting the protocol, we recommend using OAuth 2.0 and OIDC for these application types.
SAML 2.0 (Security Assertion Markup Language) is an open standard created to provide cross-domain single sign-on (SSO). In other words, it allows a user to authenticate in a system and gain access to another system by providing proof of their authentication.
All major cloud applications support SAML, including Office 365, Google Workspace (formerly G Suite), Salesforce, Dropbox, and ServiceNow. ADSelfService Plus supports SSO for all SAML 2.0-enabled cloud applications.
SAML 2.0 was introduced in 2005 and remains the current version of the standard. The previous version, 1.1, is now largely deprecated.
There are existing standards and tools to support your requirement today. As Scott mentioned, it does require either using the embedded browser in iOS within your application or allowing the iOS Safari Browser to handle the SAML/Browser portion of SSO (each has its own pros/cons). You can check out this free White Paper entitled, "A Standards-based Mobile Application IdM Architecture" that talks about how Ping (my employer) customers are handling this today if you'd like some more ideas.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With