400-007: Cisco Certified Design ExpertDemo

SAML enables identity federation by allowing trusted identity providers and service providers to exchange identity assertions across separate environments. Its signed assertions contain claims that services can evaluate against access-control policies, enabling policy-based token use. SAML does not itself create a unified directory or require hardware MFA tokens.