network authentication

SAML

Security Assertion Markup Language

SAML assertion written in extensible markup language XML.

Communications are established

Using HTTP/HTTPS and the Simple object Access Protocol (SOAP)

Secure tokens are assigned

ASSIGNED XML signature specification .the use of a digital signature allows the relying party to trust identity provider

SAML implementation example

AWS Amazon Web Services which functions as a SAML relying party. Allows companies using AWS to develop cloud applications to manage their customer’s user identities and provide them with permissions in AWS without having to create accounts for them on AWS directly.

Kerberos

Kerberos is named after three headed dog Cerberus because it consists of three parts

Client(which requests service)

Server (from which the service is requested)

Key distribution center (KDC) to vouch for identity

KDC - key distribution center

two services that makes it up

Authentication Service

Ticket Granting service

KDC - Authentication Service

Responsible for authenticating user logon requests, more generally users and services can be authenticated. Collectively referred to as principals

First step of logon is to authenticate with a KDC server (implemented as a domain controller)

KDC - ticket granting ticket

To access resources within the domain, client requests a service ticket ( a token that grants access to a target application server) by supplying the ticket granting ticket to the ticket granting service (TGS)