SAML是否支持Android、iOS原生移动应用？

Absolutely, SAML does support mobile applications—though it’s totally understandable that you didn’t spot explicit Android/iOS API docs in the OneLogin developer portal right away; provider documentation can sometimes prioritize web-focused flows over mobile-specific ones.

Here’s what you need to know for your use case:

• OneLogin doesn’t offer dedicated SAML-specific SDKs for Android or iOS, but you can implement SAML authentication in mobile apps using their general SAML tools alongside platform-native components:
  • Use a WebView (Android) or WKWebView (iOS) to load OneLogin’s SAML login endpoint. This lets users complete the standard SAML authentication flow within your app without switching to an external browser.
  • Configure a custom URL scheme or universal link for your app to receive the SAML assertion callback after authentication. Once the callback is received, your app can parse and validate the SAML assertion to grant access.
• For parsing and validating SAML assertions, you can leverage third-party libraries tailored to mobile platforms:
  • On Android, consider opensaml-android (a mobile port of the popular OpenSAML library)
  • On iOS, libraries like SAMLSwift work well for handling SAML assertion logic
• It’s worth noting that many mobile apps opt for OAuth/OIDC over direct SAML because it’s more natively designed for mobile scenarios, but SAML is fully functional—you just need to adapt the web-centric flow to mobile constraints.

If you’re still stuck, diving into OneLogin’s general SAML implementation guides and adapting the steps for mobile (like handling redirects and assertion parsing) should get you on the right track.

内容的提问来源于stack exchange，提问作者Veerendra