> SAML is pretty simple, it just uses XML which I think turns people off to it by default. I've implemented it once and I feel like I have a decent handle on what it is (though maybe I've just avoided the worst edge cases).
I once tried to implement it, and found that the specification was spread across ~500 pages of dense PDFs. I find it to be complex.
Well, relatively simple. If you added up the number of pages in the specs for http, html, css, ecmascript, and all the various apis that web developers use every day it would likely be hundreds of thousands, maybe millions of pages. That doesn't seem like a particularly useful metric, because you don't have to read and understand the entire spec to use a technology.
I once tried to implement it, and found that the specification was spread across ~500 pages of dense PDFs. I find it to be complex.