I got your books few months ago when I was trying to learn system design without even knowing you were on youtube providing amazing contents. thanks a lot. I really love your content
Something I would love to see about SSO is diving deeper into the SSO Authorization side as well. These examples are fantastic for the SSO authentication area but not diving into authorization to not just determine who the user is but also what they have access to. I love your videos and strongly recommend them to my coworkers to help explain complex topics very easily but I also struggle to properly explain SSO Authentication vs SSO Authorization and the importance of both.
Best explanation of SAML traffic flow I've seen. Other videos make it seem as though the IDP is making outbound connection to SP to deliver the assertion!
Thanks for the video! As a product manager, your videos are super useful and easy to understand. Your videos by far are the most well created and easy to understand for explaining complex concepts. I am currently trying to wrap my head around to understand how my developers implemented SSO in my company using OAuth2 and OIDC because I need to explain to people who have even less technical knowledge than I am. You'd think your own developers can explain what they have implemented, but having ability to explain complex concept to non-developers is not for everyone. Would be great if you can also provide a similar easy to understand video for how SSO is implemented with OAuth2 and OIDC. 🙏🙏🙏
Hi folks from Byte Byte Go. Your videos are great! But specifically for this one, I think you should explain how SAR, which is actually a XML document, is passed from SP to browser then to IdP (the same for the SAML assertion). I do not have deep knowledge in SAML, but I suspect the XLM document is compressed (deflate), base64 encoded, and passed as a query string into a HTTP 302 Redirect response. I don't know if I'm correct. But I think this explanation should be on the video. It's a very basic detail of implementation that everyone interested on the basic technical aspects of SAML (me included) should learn/be aware.
SSO is an authentication scheme. SSO is built on a concept called federated identity. It enables sharing of identity information across trusted but independent systems. Key concepts: 1. Service Provider and Identify Provider 2. Federated Identity protocols: SAML (XML) vs OpenID (JWT)
You made it so easy for me to understand !! Thank you so much! Im now a subscriber and soon to be an active viewer. Thanks again for a fantastic breakdown!
I don't ever think I've ever received so much valuable information, in such a short amount of time. That was a terrific video, keep up the good work! :)
This is a powerhouse of information. A book I read on this was also a wealth of knowledge. "The Art of Meaningful Relationships in the 21st Century" by Leo Flint
Loved this style of video where you explain popular standards, more of this in the future i hope! I'm also a big fan of ur system desgin videos and was wondering if you would do a high frequency chat system like twitch chat or anything that involves combining the C10K problem with a chat channel. Maybe its just as simple as throwing together a redis microservice but im dying to know!
Spectacular video that simplifies a complex process in a short, digestible clip without any fluff. I loved the animations throughout the video. What app or tool are you using for the animations?
Could you pls cover the following in future segments, if possible: Coordination Service Consensus algorithms B Trees Broadcast Protocols Vector Clocks Thanks!
Thanks for the video! I learned that there is another way SSO scheme called CAS, and I wonder that what different with OIDC and SAML. Would be great if you can also provide a similar easy to understand video.😁
LDAP is a vendor-neutral protocol to access directory services (think SQL for databases). You might have an Active Directory DS in your company, which you can query using LDAP. Meaning there is one single source of truth for technical user data. This allows for integration with other software, such as an IdP. In practice OIDC/SAML provide SSO (=login once, for everywhere), whereas directly LDAP-backed logins would require you to enter credentials every time.
Good explanation. Thanks. A question though- how does the identity provider know that user has already signed in? What information does user's browser provider to identity provider? If this information is cached in user's browser, is it not prone to client side security attacks?
Best tutorial about SSO. Just still have some confusion in step 4, the logging in page(in the video 2:07). I just tried one time, if I'm on the compnay's VPN, there isn't login page; is that login page for employee to log in the company's network or it's for logging into the ID service provider's network?
Just watching your videos made me buy your books. Your diagrams and videos are amazing. Keep up the good work. One question in the above video, does Service Provider and IDP need to be preconfigured to support each other? i.e. Does the Service provider tells IDP in advance that "hey IDP I am using a SAML for clients" so please register me on your IDP. Otherwise, how will IDP know that this SAML is meant for this Service provider? 👏
What is the difference between SSO and Oauth authentication? The design for Oauth "authorization code grant type" standard seems a lot simpler. Why not just use that?
OAuth is an authorization protocol and OIDC is an “authentication” protocol. So, the idea of “OAuth authentication” is wrong. On the other hand, SSO is achieved when you have an existing session in the IdP.
Even after landing the senior-level job, I still comeback time-to-time to refresh my memories
Thank you
I love the simplification of your tutorials. Great content
this channel is underrated, keep the good work.
I agree
This channel is not underated. it started from 2022/6/9 and it has reached 222 k subscriptions. Growing very fast!
@@goldfishbrainjohn2462 tbh this is the fastest growing tech channel I ever seen
You really are doing excellent videos. Way to translate difficult system design for the rest of us. Good job translating. THANK YOU!
I got your books few months ago when I was trying to learn system design without even knowing you were on youtube providing amazing contents.
thanks a lot.
I really love your content
Something I would love to see about SSO is diving deeper into the SSO Authorization side as well. These examples are fantastic for the SSO authentication area but not diving into authorization to not just determine who the user is but also what they have access to.
I love your videos and strongly recommend them to my coworkers to help explain complex topics very easily but I also struggle to properly explain SSO Authentication vs SSO Authorization and the importance of both.
Key concepts:
1. Service Provider and Identify Provider
2. Federated Identity protocols: SAML (XML) vs OpenID (JWT)
Best explanation of SAML traffic flow I've seen. Other videos make it seem as though the IDP is making outbound connection to SP to deliver the assertion!
First, I give it a like then I watch because I believe the content
I could listen to this guy all day. Doesn't even have to be tech stuff. He could open a cooking channel for all I care
You deserve more subs. Keep up the great work.
Super simple yet very complete explanation. 10/10
Thanks for the video!
As a product manager, your videos are super useful and easy to understand. Your videos by far are the most well created and easy to understand for explaining complex concepts.
I am currently trying to wrap my head around to understand how my developers implemented SSO in my company using OAuth2 and OIDC because I need to explain to people who have even less technical knowledge than I am. You'd think your own developers can explain what they have implemented, but having ability to explain complex concept to non-developers is not for everyone.
Would be great if you can also provide a similar easy to understand video for how SSO is implemented with OAuth2 and OIDC.
🙏🙏🙏
Hi folks from Byte Byte Go. Your videos are great! But specifically for this one, I think you should explain how SAR, which is actually a XML document, is passed from SP to browser then to IdP (the same for the SAML assertion). I do not have deep knowledge in SAML, but I suspect the XLM document is compressed (deflate), base64 encoded, and passed as a query string into a HTTP 302 Redirect response. I don't know if I'm correct. But I think this explanation should be on the video. It's a very basic detail of implementation that everyone interested on the basic technical aspects of SAML (me included) should learn/be aware.
SSO is an authentication scheme. SSO is built on a concept called federated identity. It enables sharing of identity information across trusted but independent systems.
Key concepts:
1. Service Provider and Identify Provider
2. Federated Identity protocols: SAML (XML) vs OpenID (JWT)
For some reason these videos make me feel more relaxed
abstraction and simplification of a huge implementation, that's why
You made it so easy for me to understand !! Thank you so much! Im now a subscriber and soon to be an active viewer. Thanks again for a fantastic breakdown!
Thanks for choosing SAML, for explanation.
Simple, easy and direct to the point explanation of SSO. Thank you so much for the info and being so precise!
Great explanation, easily understandable visual diagrams, all in under 5 mins..Thank you so much.
This video is fantastic. Definitely the best one I have seen for this topic that goes over SAML and OIDC topics!
Thank you. You are the best one who is explaining the SSO.
I don't ever think I've ever received so much valuable information, in such a short amount of time. That was a terrific video, keep up the good work! :)
Amazing and on point explanation provided enough to keep in mind and use when a real scenario is encountered. Thanks a ton sir. hare krishna
Very good video, thanks; special mention to the clarity of thought and presentation; this made the concept easier to grasp.
Finally! Great clear explanation! Thank you!
This is a powerhouse of information. A book I read on this was also a wealth of knowledge. "The Art of Meaningful Relationships in the 21st Century" by Leo Flint
Thank you for the video. It's super clear. Loved this style of presentation
How is your editing skills so so good:!?!??
it is amazing how quickly this channel have grown. Great content!
Great video. SSO explained so easily with SAML / openid flow.
What a clear, straight-forward explanation. Thanks man.
good video and explanation 👍 hello from Russia, yaroslavl❤😎
I really like how you simplified sso 😀
Great video. The visuals are very well done
Thank you. Such a nice explanation in short video... 👍👍 Really liked it.
Very good one. simple and without fluffs
This is good video for learning single sign-on. But this video will good than more if having code example. Thank you.
Loved this style of video where you explain popular standards, more of this in the future i hope! I'm also a big fan of ur system desgin videos and was wondering if you would do a high frequency chat system like twitch chat or anything that involves combining the C10K problem with a chat channel. Maybe its just as simple as throwing together a redis microservice but im dying to know!
Spectacular video that simplifies a complex process in a short, digestible clip without any fluff. I loved the animations throughout the video. What app or tool are you using for the animations?
@bytebytego how do you create such crystal clear animated videos?
Crisp and full of info. Love the bytes for a high level understanding
Very nice explanation, many thanks...
Love this channel.
Wonderful explanation! Thank you dear.
great clarity. Thanks
Another epic video. Thanks
Great content! Excellent explanation of a complicated problem in a simple way.
Wow excellent video.👍👍
Make a video on "How a react app works?"
how to make these awesome animated slides i.e which tool do you use for this can you please tell
Thank you I did confirm and learned something new. I'm subscribing.
Could you please share the tool that you used to create these videos
very simple explaination
Very well explained. Thanks a lot!
Could you pls cover the following in future segments, if possible:
Coordination Service
Consensus algorithms
B Trees
Broadcast Protocols
Vector Clocks
Thanks!
Great explanation, thank you so much.
Great vid as always! Weird coincidence that I'm currently implementing SSO at my current org
Thanks for sharing rich information with nice view.
Thanks for the video. Clearly understandable.
Can you please tell me the name of software you use to create these animation, I'd like to learn it.....
Me too looking for it. Or it is just PowerPoint?
Following...
@@SiddheshPrabhugaonkar i thought that too but it's look much more refined than power point... And if it's powerpoint than he is at God level....
It had some zooms I don’t think it’s PowerPoint
It's After Effects.
So so clear. Thank you, sir.
Solid explanation. Thank you.
Thanks for the video!
I learned that there is another way SSO scheme called CAS, and I wonder that what different with OIDC and SAML.
Would be great if you can also provide a similar easy to understand video.😁
Nice explanation, can you please explain OpenID implementation as well?
Great content!
Would also be great to see how the LDAP protocol fits into the picture.
LDAP is a vendor-neutral protocol to access directory services (think SQL for databases). You might have an Active Directory DS in your company, which you can query using LDAP. Meaning there is one single source of truth for technical user data. This allows for integration with other software, such as an IdP. In practice OIDC/SAML provide SSO (=login once, for everywhere), whereas directly LDAP-backed logins would require you to enter credentials every time.
I'm sorry if my question sounds dumb.
Where does OAuth 2.0 and LDAP fit in this picture? I saw common protocols at 0:48 are SAML and OpenID Connect.
My friend, these videos are amaing.Would you mind sharing what application you use to built them ?
Thank you for the tutorials. Id like to know with which tool you made this video
👍very informative video. Thanks a lot
what tool you are using for this presentation?
Great explanation. Thank you !!!
Thanks for the excelent informatio.
can you create another video explaining differece between sso (saml, openid) vs oauth2
Great content! Thank you so much for these creations!
Super double great contents !!!
such a wonderfull simplification
Good explanation. Thanks. A question though- how does the identity provider know that user has already signed in? What information does user's browser provider to identity provider? If this information is cached in user's browser, is it not prone to client side security attacks?
This was a great video
Thanks for video, great content!
Simply perfect!
animationa are spot on..
How smartly he skips twitter at 04:35 🤣
very helpful and nicely illustrated! Which program you are using to make these explanations?
Very informative and concise
Best tutorial about SSO. Just still have some confusion in step 4, the logging in page(in the video 2:07). I just tried one time, if I'm on the compnay's VPN, there isn't login page; is that login page for employee to log in the company's network or it's for logging into the ID service provider's network?
love the tutorials. btw, what tool do you use for diagrams?
3:22 how would the IDP know that the user has already logged in? Is it through some session id or token?
Did anyone else peep how he skipped Twitter when talking about the identity providers you can count on at the end?
lols twitter's n identity crisis right now
The subtle shade! Twitter has OAuth issues after Elon started tackling the claimed "microservices bloat"
I could be wrong but I think this channel is associated with Tik Tok, so it would make sense that they skip 🙂
I laughed loud at that point 😂
Twitterr handled it differently. If i'm not mistaken oauth1 and session based solution. Its different than others.
Come for the vids, stay for Sahn Lam.
Great animations
Good video, thanks.
Does anyone know what's the tool to use to accomplish the animation that is used in this video?
Love this one! Thx!
So, when we talk about OAuth 2.0, we are always talking about a scenario of SSO ?
Thank you in advance,
Just watching your videos made me buy your books. Your diagrams and videos are amazing. Keep up the good work.
One question in the above video, does Service Provider and IDP need to be preconfigured to support each other? i.e. Does the Service provider tells IDP in advance that "hey IDP I am using a SAML for clients" so please register me on your IDP. Otherwise, how will IDP know that this SAML is meant for this Service provider?
👏
Yes, service provider has to be manually added as relying party in Identity Provider configuration.
yes, SP has to register with the IDP and also setup users etc
Interesting! What about ‘login with Apple’. What are they using?
Maybe the 5 minutes most precious of the internet.
What is the difference between SSO and Oauth authentication?
The design for Oauth "authorization code grant type" standard seems a lot simpler. Why not just use that?
OAuth is an authorization protocol and OIDC is an “authentication” protocol. So, the idea of “OAuth authentication” is wrong.
On the other hand, SSO is achieved when you have an existing session in the IdP.
is there a video where you dive deeper into the OpenID?
What editor is used to edit these videos?
I freaking love you man
❤