I am studying SAML and SSO, and it looks like the application that use SAML need to be a web application and relying on a browser.
Can anybody tell me why?
My limited knowledge of SAML tells me that SAML relies on session and cookie, which is not available in desktop application or mobile app. Is that the only reason? Can you give me more details about this?