Refer to the exhibit.

 SAML is a common and standard SSO handler that allows a user to access multiple systems after providing authentication credentials once. AEM ships with a SAML 2.0 Authentication Handler that supports signing and encryption of messages, automatic creation of users, and synching groups to existing ones in AEM3. By integrating AEM Publisher using SAML directly with the IDP, the Architect can leverage the existing user accounts and authentication mechanism for the end users of the secured website.