SAML authentication in Cybersecurity - Mini Project: Build & Apply

Understanding SAML Authentication

📖 Scenario: You are learning about how Single Sign-On (SSO) works using SAML (Security Assertion Markup Language). Imagine a company wants to let its employees log in once and access multiple apps without signing in again.

🎯 Goal: Build a simple step-by-step outline of the SAML authentication process using clear, exact terms and data structures to represent the key parts of the process.

📋 What You'll Learn

Create a dictionary representing the Service Provider (SP) details

Add a configuration variable for the Identity Provider (IdP) URL

Write a list comprehension to create SAML assertions for users

Complete the process by adding a final dictionary representing the SAML response

💡 Why This Matters

🌍 Real World

SAML is widely used in companies to enable Single Sign-On (SSO), allowing users to access multiple applications securely with one login.

💼 Career

Understanding SAML authentication is important for cybersecurity professionals, system administrators, and developers working on identity and access management.

1

Create Service Provider details

Create a dictionary called service_provider with these exact entries: 'entity_id': 'sp.example.com', 'acs_url': 'https://sp.example.com/acs', and 'certificate': 'SP_CERT_12345'.

Cybersecurity

# Create the service_provider dictionary with entity_id, acs_url, and certificate
# Your code here

Need a hint?

Use a dictionary with the exact keys and values as shown.

2

Add Identity Provider URL

Create a variable called idp_url and set it to the string 'https://idp.example.com/sso'.

Cybersecurity

service_provider = {
    'entity_id': 'sp.example.com',
    'acs_url': 'https://sp.example.com/acs',
    'certificate': 'SP_CERT_12345'
}
# Create the idp_url variable with the IdP SSO URL
# Your code here

Need a hint?

Assign the exact URL string to the variable idp_url.

3

Create SAML assertions for users

Given a list users = ['alice', 'bob', 'carol'], create a list called saml_assertions using a list comprehension that creates a dictionary for each user with keys 'username' and 'assertion'. The 'assertion' value should be the string 'assertion_for_' concatenated with the username.

Cybersecurity

service_provider = {
    'entity_id': 'sp.example.com',
    'acs_url': 'https://sp.example.com/acs',
    'certificate': 'SP_CERT_12345'
}
idp_url = 'https://idp.example.com/sso'
users = ['alice', 'bob', 'carol']
# Create saml_assertions list with dictionaries for each user
# Your code here

Need a hint?

Use a list comprehension with user as the loop variable.

4

Create the final SAML response dictionary

Create a dictionary called saml_response with keys 'sp', 'idp', and 'assertions'. Set 'sp' to the service_provider dictionary, 'idp' to the idp_url string, and 'assertions' to the saml_assertions list.

Cybersecurity

service_provider = {
    'entity_id': 'sp.example.com',
    'acs_url': 'https://sp.example.com/acs',
    'certificate': 'SP_CERT_12345'
}
idp_url = 'https://idp.example.com/sso'
users = ['alice', 'bob', 'carol']
saml_assertions = [{'username': user, 'assertion': f'assertion_for_{user}'} for user in users]
# Create saml_response dictionary combining sp, idp, and assertions
# Your code here

Need a hint?

Combine the existing variables into one dictionary with the exact keys.