SAML is a protocol for exchanging authentication and authorization data between parties, commonly used for Single Sign-On. It works through a flow of messages between the Identity Provider and Service Provider.