This Committee Specification states how an ebMS3/AS4 MSH can support SAML in addition to the username/password and X.509 token profiles of WS-Security for authentication. While the usage of the username/password and X.509 tokenprofiles of WS-Security are defined in some detail in ebMS3 and AS4, SAML is not defined in detail in ebMS3 and not discussed at all in AS4. This document defines the use of SAML in ebMS3 and applies that to the scenarios addressed by AS4.