{"id":579946,"date":"2023-12-28T03:14:07","date_gmt":"2023-12-28T03:14:07","guid":{"rendered":"https:\/\/proxyelite.info\/glossary\/saml-security-assertion-markup-language\/"},"modified":"2023-12-28T03:14:07","modified_gmt":"2023-12-28T03:14:07","slug":"saml-security-assertion-markup-language","status":"publish","type":"glossary","link":"https:\/\/proxyelite.info\/vi\/glossary\/saml-security-assertion-markup-language\/","title":{"rendered":"SAML (Ng\u00f4n ng\u1eef \u0111\u00e1nh d\u1ea5u x\u00e1c nh\u1eadn b\u1ea3o m\u1eadt)"},"content":{"rendered":"

Th\u00f4ng tin t\u00f3m t\u1eaft v\u1ec1 SAML (Ng\u00f4n ng\u1eef \u0111\u00e1nh d\u1ea5u x\u00e1c nh\u1eadn b\u1ea3o m\u1eadt)<\/h2>\n

Ng\u00f4n ng\u1eef \u0111\u00e1nh d\u1ea5u x\u00e1c nh\u1eadn b\u1ea3o m\u1eadt (SAML) l\u00e0 m\u1ed9t ti\u00eau chu\u1ea9n m\u1edf d\u1ef1a tr\u00ean XML \u0111\u01b0\u1ee3c c\u00f4ng nh\u1eadn v\u00e0 \u00e1p d\u1ee5ng r\u1ed9ng r\u00e3i \u0111\u1ec3 trao \u0111\u1ed5i d\u1eef li\u1ec7u x\u00e1c th\u1ef1c v\u00e0 \u1ee7y quy\u1ec1n gi\u1eefa c\u00e1c b\u00ean, \u0111\u1eb7c bi\u1ec7t l\u00e0 trong b\u1ed1i c\u1ea3nh c\u00e1c \u1ee9ng d\u1ee5ng v\u00e0 d\u1ecbch v\u1ee5 d\u1ef1a tr\u00ean web. \u0110\u01b0\u1ee3c ph\u00e1t tri\u1ec3n v\u00e0 duy tr\u00ec b\u1edfi t\u1eadp \u0111o\u00e0n OASIS, SAML \u0111\u00f3ng vai tr\u00f2 then ch\u1ed1t trong vi\u1ec7c \u0111\u1ea3m b\u1ea3o quy tr\u00ecnh \u1ee7y quy\u1ec1n v\u00e0 x\u00e1c th\u1ef1c \u0111\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO) an to\u00e0n tr\u00ean c\u00e1c mi\u1ec1n v\u00e0 \u1ee9ng d\u1ee5ng kh\u00e1c nhau. B\u00e0i vi\u1ebft n\u00e0y \u0111i s\u00e2u v\u00e0o chi ti\u1ebft to\u00e0n di\u1ec7n v\u1ec1 SAML, kh\u00e1m ph\u00e1 c\u00e1c t\u00ednh n\u0103ng ch\u00ednh, lo\u1ea1i, tr\u01b0\u1eddng h\u1ee3p s\u1eed d\u1ee5ng, th\u00e1ch th\u1ee9c v\u00e0 tri\u1ec3n v\u1ecdng trong t\u01b0\u01a1ng lai, v\u1edbi tr\u1ecdng t\u00e2m c\u1ee5 th\u1ec3 l\u00e0 s\u1ee9c m\u1ea1nh t\u1ed5ng h\u1ee3p c\u1ee7a n\u00f3 v\u1edbi m\u00e1y ch\u1ee7 proxy.<\/p>\n

Th\u00f4ng tin chi ti\u1ebft v\u1ec1 SAML (Ng\u00f4n ng\u1eef \u0111\u00e1nh d\u1ea5u x\u00e1c nh\u1eadn b\u1ea3o m\u1eadt)<\/h2>\n

V\u1ec1 c\u1ed1t l\u00f5i, SAML t\u1ea1o \u0111i\u1ec1u ki\u1ec7n thu\u1eadn l\u1ee3i cho vi\u1ec7c trao \u0111\u1ed5i th\u00f4ng tin x\u00e1c th\u1ef1c v\u00e0 \u1ee7y quy\u1ec1n gi\u1eefa c\u00e1c th\u1ef1c th\u1ec3 \u0111\u00e1ng tin c\u1eady, \u0111\u01b0\u1ee3c g\u1ecdi l\u00e0 Nh\u00e0 cung c\u1ea5p nh\u1eadn d\u1ea1ng (IdP) v\u00e0 Nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 (SP). IdP ch\u1ecbu tr\u00e1ch nhi\u1ec7m x\u00e1c th\u1ef1c ng\u01b0\u1eddi d\u00f9ng, trong khi SP l\u00e0 \u1ee9ng d\u1ee5ng ho\u1eb7c d\u1ecbch v\u1ee5 m\u00e0 ng\u01b0\u1eddi d\u00f9ng t\u00ecm ki\u1ebfm quy\u1ec1n truy c\u1eadp. Ti\u00eau chu\u1ea9n n\u00e0y d\u1ef1a tr\u00ean c\u00e1c x\u00e1c nh\u1eadn d\u1ef1a tr\u00ean XML \u0111\u1ec3 truy\u1ec1n nh\u1eadn d\u1ea1ng ng\u01b0\u1eddi d\u00f9ng v\u00e0 quy\u1ec1n truy c\u1eadp m\u1ed9t c\u00e1ch an to\u00e0n.<\/p>\n

Ph\u00e2n t\u00edch c\u00e1c t\u00ednh n\u0103ng ch\u00ednh c\u1ee7a SAML<\/h2>\n

SAML t\u1ef1 h\u00e0o c\u00f3 m\u1ed9t s\u1ed1 t\u00ednh n\u0103ng ch\u00ednh gi\u00fap n\u00f3 tr\u1edf th\u00e0nh gi\u1ea3i ph\u00e1p ph\u00f9 h\u1ee3p cho vi\u1ec7c qu\u1ea3n l\u00fd danh t\u00ednh v\u00e0 quy\u1ec1n truy c\u1eadp:<\/p>\n

    \n
  1. \n

    \u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO):<\/strong> SAML cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp nhi\u1ec1u d\u1ecbch v\u1ee5 v\u1edbi m\u1ed9t b\u1ed9 th\u00f4ng tin x\u00e1c th\u1ef1c duy nh\u1ea5t, n\u00e2ng cao s\u1ef1 thu\u1eadn ti\u1ec7n v\u00e0 b\u1ea3o m\u1eadt cho ng\u01b0\u1eddi d\u00f9ng.<\/p>\n<\/li>\n

  2. \n

    B\u1ea3o v\u1ec7:<\/strong> N\u00f3 cung c\u1ea5p c\u00e1c c\u01a1 ch\u1ebf b\u1ea3o m\u1eadt m\u1ea1nh m\u1ebd, bao g\u1ed3m ch\u1eef k\u00fd s\u1ed1 v\u00e0 m\u00e3 h\u00f3a, \u0111\u1ec3 b\u1ea3o v\u1ec7 d\u1eef li\u1ec7u \u0111\u01b0\u1ee3c trao \u0111\u1ed5i.<\/p>\n<\/li>\n

  3. \n

    Kh\u1ea3 n\u0103ng t\u01b0\u01a1ng t\u00e1c:<\/strong> SAML nh\u1eadn \u0111\u01b0\u1ee3c s\u1ef1 h\u1ed7 tr\u1ee3 r\u1ed9ng r\u00e3i trong ng\u00e0nh, \u0111\u1ea3m b\u1ea3o kh\u1ea3 n\u0103ng t\u01b0\u01a1ng th\u00edch gi\u1eefa c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5 v\u00e0 nh\u00e0 cung c\u1ea5p danh t\u00ednh kh\u00e1c nhau.<\/p>\n<\/li>\n

  4. \n

    Ki\u1ec3m so\u00e1t truy c\u1eadp chi ti\u1ebft:<\/strong> SAML cho ph\u00e9p ki\u1ec3m so\u00e1t chi ti\u1ebft quy\u1ec1n truy c\u1eadp c\u1ee7a ng\u01b0\u1eddi d\u00f9ng, th\u00fac \u0111\u1ea9y b\u1ea3o m\u1eadt v\u00e0 quy\u1ec1n ri\u00eang t\u01b0 d\u1eef li\u1ec7u.<\/p>\n<\/li>\n<\/ol>\n

    C\u00e1c lo\u1ea1i SAML<\/h2>\n

    C\u00f3 ba lo\u1ea1i SAML ch\u00ednh:<\/p>\n

      \n
    1. \n

      SAML 1.1:<\/strong> Phi\u00ean b\u1ea3n g\u1ed1c c\u1ee7a SAML, cung c\u1ea5p c\u00e1c kh\u1ea3 n\u0103ng SSO c\u01a1 b\u1ea3n.<\/p>\n<\/li>\n

    2. \n

      SAML 2.0:<\/strong> Phi\u00ean b\u1ea3n \u0111\u01b0\u1ee3c \u00e1p d\u1ee5ng r\u1ed9ng r\u00e3i nh\u1ea5t, cung c\u1ea5p c\u00e1c t\u00ednh n\u0103ng n\u00e2ng cao nh\u01b0 ki\u1ec3m so\u00e1t truy c\u1eadp d\u1ef1a tr\u00ean thu\u1ed9c t\u00ednh v\u00e0 b\u1ea3o m\u1eadt n\u00e2ng cao.<\/p>\n<\/li>\n

    3. \n

      SAML 2.1:<\/strong> Ph\u1ea7n m\u1edf r\u1ed9ng c\u1ee7a SAML 2.0, \u0111\u01b0\u1ee3c thi\u1ebft k\u1ebf \u0111\u1eb7c bi\u1ec7t cho c\u00e1c \u1ee9ng d\u1ee5ng di \u0111\u1ed9ng.<\/p>\n<\/li>\n<\/ol>\n

      C\u00e1c phi\u00ean b\u1ea3n n\u00e0y ph\u1ee5c v\u1ee5 cho c\u00e1c tr\u01b0\u1eddng h\u1ee3p s\u1eed d\u1ee5ng v\u00e0 m\u1ee9c \u0111\u1ed9 ph\u1ee9c t\u1ea1p kh\u00e1c nhau.<\/p>\n

      C\u00e1ch s\u1eed d\u1ee5ng SAML, v\u1ea5n \u0111\u1ec1 v\u00e0 gi\u1ea3i ph\u00e1p<\/h2>\n

      Tr\u01b0\u1eddng h\u1ee3p s\u1eed d\u1ee5ng:<\/h3>\n
        \n
      • \u0110\u0103ng nh\u1eadp m\u1ed9t l\u1ea7n (SSO):<\/strong> SAML \u0111\u01a1n gi\u1ea3n h\u00f3a vi\u1ec7c ng\u01b0\u1eddi d\u00f9ng truy c\u1eadp v\u00e0o nhi\u1ec1u \u1ee9ng d\u1ee5ng, gi\u1ea3m nhu c\u1ea7u ghi nh\u1edb nhi\u1ec1u t\u00ean ng\u01b0\u1eddi d\u00f9ng v\u00e0 m\u1eadt kh\u1ea9u.<\/li>\n
      • Nh\u1eadn d\u1ea1ng li\u00ean k\u1ebft:<\/strong> C\u00e1c t\u1ed5 ch\u1ee9c c\u00f3 th\u1ec3 thi\u1ebft l\u1eadp m\u1ed1i quan h\u1ec7 tin c\u1eady \u0111\u1ec3 cho ph\u00e9p ng\u01b0\u1eddi d\u00f9ng t\u1eeb m\u1ed9t mi\u1ec1n truy c\u1eadp t\u00e0i nguy\u00ean \u1edf mi\u1ec1n kh\u00e1c.<\/li>\n
      • X\u00e1c th\u1ef1c t\u00ean mi\u1ec1n ch\u00e9o:<\/strong> SAML t\u1ea1o \u0111i\u1ec1u ki\u1ec7n x\u00e1c th\u1ef1c an to\u00e0n tr\u00ean c\u00e1c mi\u1ec1n, m\u1ed9t \u0111i\u1ec1u c\u1ea7n thi\u1ebft trong b\u1ed1i c\u1ea3nh web k\u1ebft n\u1ed1i ng\u00e0y nay.<\/li>\n<\/ul>\n

        Nh\u1eefng th\u00e1ch th\u1ee9c v\u00e0 gi\u1ea3i ph\u00e1p:<\/h3>\n
          \n
        • B\u1ea3n \u0111\u1ed3 nh\u1eadn d\u1ea1ng:<\/strong> Vi\u1ec7c k\u1ebft h\u1ee3p ng\u01b0\u1eddi d\u00f9ng tr\u00ean c\u00e1c h\u1ec7 th\u1ed1ng kh\u00e1c nhau c\u00f3 th\u1ec3 l\u00e0 m\u1ed9t th\u00e1ch th\u1ee9c nh\u01b0ng c\u00f3 th\u1ec3 \u0111\u01b0\u1ee3c gi\u1ea3i quy\u1ebft b\u1eb1ng c\u00e1ch s\u1eed d\u1ee5ng \u00e1nh x\u1ea1 d\u1ef1a tr\u00ean thu\u1ed9c t\u00ednh.<\/li>\n
        • R\u1ee7i ro b\u1ea3o m\u1eadt:<\/strong> Vi\u1ec7c tri\u1ec3n khai SAML c\u00f3 th\u1ec3 d\u1ec5 b\u1ecb t\u1ea5n c\u00f4ng b\u1edfi nhi\u1ec1u cu\u1ed9c t\u1ea5n c\u00f4ng kh\u00e1c nhau; tuy nhi\u00ean, c\u00e1c ph\u01b0\u01a1ng ph\u00e1p k\u00fd v\u00e0 m\u00e3 h\u00f3a m\u1ea1nh m\u1ebd s\u1ebd gi\u1ea3m thi\u1ec3u nh\u1eefng r\u1ee7i ro n\u00e0y.<\/li>\n
        • Kinh nghi\u1ec7m ng\u01b0\u1eddi d\u00f9ng:<\/strong> Ng\u01b0\u1eddi d\u00f9ng c\u00f3 th\u1ec3 g\u1eb7p ph\u1ea3i s\u1ef1 c\u1ed1 SSO nh\u01b0ng vi\u1ec7c ki\u1ec3m tra v\u00e0 gi\u00e1m s\u00e1t k\u1ef9 l\u01b0\u1ee1ng c\u00f3 th\u1ec3 gi\u00fap x\u00e1c \u0111\u1ecbnh v\u00e0 gi\u1ea3i quy\u1ebft k\u1ecbp th\u1eddi c\u00e1c s\u1ef1 c\u1ed1 \u0111\u00f3.<\/li>\n<\/ul>\n

          \u0110\u1eb7c \u0111i\u1ec3m ch\u00ednh v\u00e0 so s\u00e1nh<\/h2>\n

          H\u00e3y so s\u00e1nh SAML v\u1edbi c\u00e1c thu\u1eadt ng\u1eef v\u00e0 kh\u00e1i ni\u1ec7m t\u01b0\u01a1ng t\u1ef1:<\/p>\n\n\n\n\n\n\n\n
          Thu\u1eadt ng\u1eef\/Kh\u00e1i ni\u1ec7m<\/th>\nS\u1ef1 mi\u00eau t\u1ea3<\/th>\n<\/tr>\n<\/thead>\n
          SAML so v\u1edbi OAuth<\/td>\nSAML ch\u1ee7 y\u1ebfu d\u00e0nh cho x\u00e1c th\u1ef1c, trong khi OAuth t\u1eadp trung v\u00e0o \u1ee7y quy\u1ec1n.<\/td>\n<\/tr>\n
          SAML so v\u1edbi OpenID Connect<\/td>\nSAML d\u1ef1a tr\u00ean XML, trong khi OpenID Connect d\u1ef1a tr\u00ean JSON.<\/td>\n<\/tr>\n
          SAML so v\u1edbi JWT<\/td>\nSAML c\u00f3 nhi\u1ec1u t\u00ednh n\u0103ng h\u01a1n, h\u1ed7 tr\u1ee3 SSO v\u00e0 nh\u1eadn d\u1ea1ng li\u00ean k\u1ebft, trong khi JWT l\u00e0 m\u1ed9t m\u00e3 th\u00f4ng b\u00e1o nh\u1eb9 \u0111\u1ec3 x\u00e1c th\u1ef1c.<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

          Quan \u0111i\u1ec3m v\u00e0 c\u00f4ng ngh\u1ec7 t\u01b0\u01a1ng lai<\/h2>\n

          SAML ti\u1ebfp t\u1ee5c ph\u00e1t tri\u1ec3n, th\u00edch \u1ee9ng v\u1edbi b\u1ed1i c\u1ea3nh \u0111ang thay \u0111\u1ed5i c\u1ee7a an ninh m\u1ea1ng v\u00e0 x\u00e1c th\u1ef1c. Nh\u1eefng ph\u00e1t tri\u1ec3n trong t\u01b0\u01a1ng lai c\u00f3 th\u1ec3 bao g\u1ed3m:<\/p>\n