SAML 2.0 is the identity federation protocol of choice for universities. The institution runs an Identity Provider (IdP) — Microsoft Entra ID, Shibboleth, Google Workspace, or Okta — and the LMS is a Service Provider (SP). The learner authenticates once against the IdP; the IdP asserts the identity to the LMS via a signed XML token. No passwords are ever sent to or stored by the LMS.
SAML vs OIDC — which to choose
- SAML 2.0 — better compatibility with legacy enterprise IdPs (ADFS, Shibboleth). Most universities already have SAML-capable infrastructure. No JavaScript dependency — works in browser redirects.
- OpenID Connect (OIDC) — simpler, modern, JSON-based. Better for mobile and SPA clients. Used by Google, Microsoft (modern flows), Okta.
DeepTech supports both SAML 2.0 and OIDC, so institutions can connect their existing IdP without rebuilding their identity infrastructure.