Take the 2-minute tour ×  I'm configuring an Azure ACS STS and
would like to know if there is any impact on security based on
the following token formats or how they are used. The answers to
this questions should apply to other STSs such as CA Siteminder,
Ping Identity, ADFS and others. Here is the selection I see in
my configuration portal:  enter image description here  The
corresponding help link takes me to MSDN documentation that
doesn't cover security questions like this.  Is the difference
in Token Format merely the manner in which it is serialized:
• The size of the token (that may round trip to the browser)   •
Fundamental differences in security   • Differences in features
and functionality  I have heard in several MSFT talks that SWT
is an overly simplified version of SAML, and JWT is a not-yet-
finalized standard by Google, IBM, and MSFT that should
compromise on features between SWT and SAML.  share|improve this
question  4 Answers 4  Better or worse is relative to the usage
of the protocol. SA