Glossary: Identity and Access Management

assertion

Also written: SAML assertion, assertions

A signed XML statement from the IdP saying who signed in, when, for which app, and for how long it is valid. The app must check its signature, issuer, audience and time window before trusting it.