Does SAML integration require PORT or FIREWAL Rules to be opened ?

SAML Traffic Flow

view of the SAML traffic flow is illustrated below:

IPs / Ports / Firewall Rules

A question that frequently arises concerning the SAML architecture is which network ports and firewall rules do I need to open?”.  The answer should be readily evident from the diagram flow above.  Since there is no direct communication between the IDP and the Service Provider and all communication happens via the user’s browser (outbound ports: 80, 443, and 8443), therefore, no IPs/ports/firewall rules are necessary for your infrastructure vis-à-vis  Access Manager.  Your users, on the other hand, will need to be able to interface/reach  IdP as well as your application instance. .