title: How does processing a SAML assertion work?
body: <p>I need to be the service provider in a SAML solution and want to know how the processing of assertions work. I could not find the answer <a href="http://en.wikipedia.org/wiki/SAML#The_SAML_Use_Case" rel="nofollow">here</a>.</p>
  
  <p>I imagine the assertion would say something like: "I'm John Doe, My ID is: 999"? Do i need an User list that is "in Sync" with the identity provider? Do i need an Access Control list has the same ID's as the SAML Assertions? </p>
  
  <p>Scenario: I have a database with ACL's. I will be the Service Provider while a remote 3rd party system will be the identity provider.</p>
  
  <p>I don't understand how a remote system would know what users i have in my Access Control lists to be able to authorize anyone.</p>