Quiz Entry - updated: 2026.09.17
What is an authentication assertion (Authentifizierungsbestätigung), and what is it called in SAML, OIDC and Kerberos?
An authentication assertion is the digital proof an IdP issues after successfully authenticating a subject; it is valid for a limited time and may carry the authentication context or an assurance level.
| Protocol | Authentication assertion | Issued by |
|---|---|---|
| SAML | Authentication assertion | SAML identity provider |
| OIDC | ID token | Authorization server |
| Kerberos | Ticket Granting Ticket (TGT) | Key Distribution Center (KDC) |
Go deeper:
SAML (Wikipedia) — the SAML assertion and the web-browser SSO profile.- OpenID Connect (Wikipedia) — the ID token as the assertion of an OAuth-based login.
- Kerberos (Wikipedia) — the full protocol walk-through with KDC, AS, TGS and tickets.