title: Benefits of SAML vs straight HTTP Post
body: <p>I am researching different Single Sign On options.  It seems to me that SAML while is a great solution if we look at 3rd party vendors it is somewhat out of our price range.  We are also looking at implementing our own solution... but, some of the services we want to use - just to enable SAML logins they want to charge.  If I know all of my user's credentials what is the security risk/downside of just doing an HTTP POST with the credentials to these different services?  Some of the SSO providers do this when SAML is not enabled as well.  </p>